CVE-2017-0037

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.

CVSS v3.0 8.1 HIGH
CVSS v2.0 7.6 HIGH

8.1^/10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.6^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/96088	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/96088	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037905	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037905	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037906	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037906	Broken Link Third Party Advisory VDB Entry
https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html	Exploit Third Party Advisory
https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html	Exploit Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=1011	Exploit Issue Tracking Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=1011	Exploit Issue Tracking Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037	Patch Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037	Patch Vendor Advisory
https://www.exploit-db.com/exploits/41454/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/41454/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42354/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42354/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43125/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43125/	Exploit Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows_10_1507:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1607:-:::::::*

Configuration 2 (hide)

AND

cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows_10_1507:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1607:-:::::::*
	cpe:2.3:o:microsoft:windows_8.1:-:::::::*
	cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2016:-:::::::*

History

04 Feb 2025, 21:30

Type	Values Removed	Values Added
References	~~(MISC) https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html - Exploit, Third Party Advisory~~	() https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html - Exploit, Third Party Advisory
References	~~(SECTRACK) http://www.securitytracker.com/id/1037905 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1037905 - Broken Link, Third Party Advisory, VDB Entry
References	~~(EXPLOIT-DB) https://www.exploit-db.com/exploits/42354/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/42354/ - Exploit, Third Party Advisory, VDB Entry
References	~~(BID) http://www.securityfocus.com/bid/96088 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/96088 - Broken Link, Third Party Advisory, VDB Entry
References	~~(MISC) https://bugs.chromium.org/p/project-zero/issues/detail?id=1011 - Exploit, Issue Tracking, Third Party Advisory~~	() https://bugs.chromium.org/p/project-zero/issues/detail?id=1011 - Exploit, Issue Tracking, Third Party Advisory
References	~~(EXPLOIT-DB) https://www.exploit-db.com/exploits/41454/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/41454/ - Exploit, Third Party Advisory, VDB Entry
References	~~(EXPLOIT-DB) https://www.exploit-db.com/exploits/43125/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/43125/ - Exploit, Third Party Advisory, VDB Entry
References	~~(SECTRACK) http://www.securitytracker.com/id/1037906 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1037906 - Broken Link, Third Party Advisory, VDB Entry
References	~~(CONFIRM) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 - Patch, Vendor Advisory~~	() https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 - Patch, Vendor Advisory

16 Jul 2024, 17:52

Type	Values Removed	Values Added
CPE	cpe:2.3:a:microsoft:internet_explorer:11:::::::*	cpe:2.3:o:microsoft:windows_10_1607:-:::::::* cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::* cpe:2.3:o:microsoft:windows_server_2012:r2:::::::* cpe:2.3:o:microsoft:windows_server_2012:-:::::::* cpe:2.3:a:microsoft:internet_explorer:11:-:::::: cpe:2.3:o:microsoft:windows_server_2016:-:::::::* cpe:2.3:o:microsoft:windows_10_1507:-:::::::* cpe:2.3:o:microsoft:windows_10_1511:-:::::::* cpe:2.3:o:microsoft:windows_8.1:-:::::::*
First Time		Microsoft windows 10 1507 Microsoft windows 8.1 Microsoft windows 10 1511 Microsoft windows Server 2012 Microsoft windows Server 2016 Microsoft windows Rt 8.1 Microsoft windows 10 1607
References	~~(MISC) https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html -~~	(MISC) https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html - Exploit, Third Party Advisory
References	~~(SECTRACK) http://www.securitytracker.com/id/1037905 -~~	(SECTRACK) http://www.securitytracker.com/id/1037905 - Broken Link, Third Party Advisory, VDB Entry
References	~~(SECTRACK) http://www.securitytracker.com/id/1037906 -~~	(SECTRACK) http://www.securitytracker.com/id/1037906 - Broken Link, Third Party Advisory, VDB Entry
References	~~(BID) http://www.securityfocus.com/bid/96088 -~~	(BID) http://www.securityfocus.com/bid/96088 - Broken Link, Third Party Advisory, VDB Entry
References	~~(EXPLOIT-DB) https://www.exploit-db.com/exploits/43125/ -~~	(EXPLOIT-DB) https://www.exploit-db.com/exploits/43125/ - Exploit, Third Party Advisory, VDB Entry
References	~~(CONFIRM) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 -~~	(CONFIRM) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0037 - Patch, Vendor Advisory
References	~~(EXPLOIT-DB) https://www.exploit-db.com/exploits/42354/ -~~	(EXPLOIT-DB) https://www.exploit-db.com/exploits/42354/ - Exploit, Third Party Advisory, VDB Entry
References	~~(EXPLOIT-DB) https://www.exploit-db.com/exploits/41454/ -~~	(EXPLOIT-DB) https://www.exploit-db.com/exploits/41454/ - Exploit, Third Party Advisory, VDB Entry
CWE	~~CWE-704~~	CWE-843

Information

Published : 2017-02-26 23:59

Updated : 2025-04-04 20:40

NVD link : CVE-2017-0037

Mitre link : CVE-2017-0037

JSON object : View

Products Affected

microsoft

windows_8.1
windows_10_1607
internet_explorer
edge
windows_10_1511
windows_rt_8.1
windows_server_2012
windows_server_2016
windows_10_1507

CWE

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

8.1 /10