CVE-2017-11819 - Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability"

Back Back to CVE browser

HIGH

Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability"

Published Oct 13, 2017

7.5

HIGH

CVSS 3.0

EPSS 14.22%

Description

Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability".

Affected products

Vendor Microsoft Corporation Product Microsoft Windows 7 SP1 Default
n/a
- Version
  Microsoft Windows 7 SP1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft Corporation

Microsoft Windows 7 SP1

n/a

Version	Status	Constraints
Microsoft Windows 7 SP1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://www.securityfocus.com/bid/101121
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039537
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/101121		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039537		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819		x_refsource_CONFIRMPatchVendor Advisory