CVE-2017-0210

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-0210
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/97512 Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/97512 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038238 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038238 Broken Link Third Party Advisory VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 Patch Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
History

10 Feb 2025, 17:15

Type Values Removed Values Added
References (SECTRACK) http://www.securitytracker.com/id/1038238 - Broken Link, Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1038238 - Broken Link, Third Party Advisory, VDB Entry
References (BID) http://www.securityfocus.com/bid/97512 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/97512 - Broken Link, Third Party Advisory, VDB Entry
References (CONFIRM) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 - Patch, Vendor Advisory () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 - Patch, Vendor Advisory

02 Jul 2024, 13:01

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
References (BID) http://www.securityfocus.com/bid/97512 - Third Party Advisory, VDB Entry (BID) http://www.securityfocus.com/bid/97512 - Broken Link, Third Party Advisory, VDB Entry
References (SECTRACK) http://www.securitytracker.com/id/1038238 - (SECTRACK) http://www.securitytracker.com/id/1038238 - Broken Link, Third Party Advisory, VDB Entry
First Time Microsoft windows 7
Microsoft windows 10 1703
Microsoft windows 10 1507
Microsoft windows 8.1
Microsoft windows 10 1511
Microsoft windows Server 2012
Microsoft windows Server 2016
Microsoft windows Rt 8.1
Microsoft windows Server 2008
Microsoft windows 10 1607
CVSS v2 : 4.3
v3 : 4.3 		v2 : 4.3
v3 : 8.8
Information

Published : 2017-04-12 14:59

Updated : 2025-02-11 17:00

NVD link : CVE-2017-0210

Mitre link : CVE-2017-0210

JSON object : View

Products Affected

microsoft

  • windows_7
  • windows_8.1
  • windows_10_1607
  • windows_10_1703
  • internet_explorer
  • windows_10_1511
  • windows_server_2012
  • windows_rt_8.1
  • windows_server_2016
  • windows_10_1507
  • windows_server_2008
CWE
NVD-CWE-noinfo