CVE-2017-0202

EPSS 45.6%

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 45.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

12 Apr 2017Published on NVD

27 Apr 2017Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. "Internet Explorer Memory Corruption Vulnerability."

Affected products

Microsoft Corporation · Internet Explorer

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/41941/unverified exploitdbwww.exploit-db.com/exploits/41941unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202 https://www.exploit-db.com/exploits/41941/http://www.securityfocus.com/bid/97441 http://www.securitytracker.com/id/1038238