CVE-2017-0037 in Edge信息

摘要

由 VulDB • 2026-05-24

Microsoft Internet Explorer 10 e 11, nonché Microsoft Edge, presentano un problema di type confusion nella funzione Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement di mshtml.dll, che consente ad attaccanti remoti di eseguire codice arbitrario tramite vettori che coinvolgono una sequenza di token Cascading Style Sheets (CSS) costruita ad hoc e codice JavaScript manipolato che opera su un elemento TH.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2016-09-09

披露

2017-02-26

管理

已接受

条目

3

连接

显示

利用

下载

EPSS

0.80386

KEV

是

活动

非常低

部门

Insurance, Finance, ...

来源

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-0037
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-0037
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-0037/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!