NVD

Id
82953  
Name
CVE-2017-0034  
Description
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2017-03-16  
Modified Date
2017-07-11  
Seq
2017-0034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408502 82953 CVE-2017-5008 95792  View
408503 82953 CVE-2017-5008 https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html  View
408504 82953 CVE-2017-5008 https://crbug.com/668552  View
410556 82953 CVE-2017-0031 96052  View
410557 82953 CVE-2017-0031 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0031  View
410558 82953 CVE-2017-0031 96052  View
410559 82953 CVE-2017-0031 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65474 JVNDB-2017-001837 Microsoft Edge における任意のコードを実行される脆弱性 Microsoft Edge には、メモリ内のオブジェクトに不適切にアクセスする場合、現在のユーザのコンテキストで任意のコードを実行される脆弱性が存在します。 CVE-2017-0034 CVE-2017-0034 82953 7.6 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001837.html 2017-03-14 2017-03-21 View