An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."
References
| Link | Resource |
|---|---|
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/97460 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038234 |
Configurations
History
No history.
Information
Published : 2017-04-12 14:59
Updated : 2017-07-11 01:33
NVD link : CVE-2017-0208
Mitre link : CVE-2017-0208
JSON object : View
Products Affected
microsoft
- edge
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor