CVE-2017-0059
Microsoft Internet Explorer 10 … 9
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NSummary
CVE-2017-0059 is a medium-severity an unspecified weakness vulnerability in Microsoft Internet Explorer. Its CVSS base score is 4.3 (Medium).
Operationally, ranked in the top 0.9% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2017-0059 is an information disclosure vulnerability affecting Microsoft Internet Explorer 9 through 11. It enables remote attackers to read sensitive data from process memory when a user visits a specially crafted web site. The issue is distinct from the related flaws tracked as CVE-2017-0008 and CVE-2017-0009.
An unauthenticated remote attacker can exploit the flaw by serving malicious content over the network; successful exploitation requires the victim to interact with the page (for example, by browsing to it) and results in limited leakage of memory contents. The CVSS 3.1 score of 4.3 reflects network attack vector, low complexity, and no impact on integrity or availability.
Microsoft published guidance for the issue in security advisory CVE-2017-0059, and public proof-of-concept code has been posted to Exploit-DB.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2017-0426
Vulnerability Data
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.
- CWE(s)
- KEV Date Added
- 28 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.