Actively exploited · Published Feb 26, 2017 · Assigned by microsoft
CVE-2017-0037
High 8.1 Exploited
In plain English
A high-severity type confusion in Internet Browser from Microsoft Corporation. Attackers are actively exploiting it in the wild (listed by CISA on March 28, 2022). The chance it is exploited in the next 30 days is estimated at 80.4% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Apr 18, 2022.
Official description
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corporation | Internet Browser | Internet Explorer 10 and 11 and Edge |
Weakness: CWE-843 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1011 x_refsource_MISC
- https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html x_refsource_MISC
- 96088 vdb-entry, x_refsource_BID
- 41454 exploit, x_refsource_EXPLOIT-DB
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 x_refsource_CONFIRM
- 43125 exploit, x_refsource_EXPLOIT-DB
- 1037905 vdb-entry, x_refsource_SECTRACK
- 42354 exploit, x_refsource_EXPLOIT-DB
- 1037906 vdb-entry, x_refsource_SECTRACK
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0037 government-resource