CVE-2017-0149 — Vulnetix

CVE-2017-0149 PUBLISHED KEV CVSS 7.599999904632568 HIGH

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037.

EPSS 33.99% · 97.1th percentile

Risk Scores

CVSS 2.0

7.599999904632568

EPSS Score

33.99%

97.1th percentile

Affected Products

Vendor	Product	Versions
microsoft	internet_explorer	9, 10, 11
Microsoft Corporation	Internet Explorer	Internet Explorer 9 through 11

Exploit Intelligence

A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG (github-poc)
A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG (github-poc)
A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG (github-poc)
A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG (github-poc)
A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG (github-poc)
A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG (github-poc)
chattopadhyaykittu/CVE-2017-0037 (github-poc)
chattopadhyaykittu/CVE-2017-0037 (github-poc)
chattopadhyaykittu/CVE-2017-0037 (github-poc)
chattopadhyaykittu/CVE-2017-0037 (github-poc)

…and 68 more exploits

Timeline

Jul 21, 2015 VulnCheck KEV Exploitation
Mar 15, 2016 VulnCheck KEV Exploitation
Dec 13, 2016 VulnCheck KEV Exploitation
Mar 14, 2017 PoC Published
Mar 15, 2017 CVE Published
Aug 31, 2017 VulnCheck KEV Exploitation
Feb 4, 2018 VulnCheck KEV Exploitation
Sep 1, 2019 VulnCheck KEV Exploitation
Mar 9, 2021 VulnCheck KEV Exploitation
Apr 14, 2021 EPSS Score
Jul 29, 2021 VulnCheck KEV Exploitation
Aug 11, 2021 VulnCheck KEV Exploitation

References

Open in Interactive Console →