Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11903 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T20:28:05.652Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2
ruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102047 - http://www.securitytracker.com/id/1039991 - https://www.exploit-db.com/exploits/43367/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11903
CVE ID: CVE-2017-11905 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T16:53:08.997Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-119
2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102050 - http://www.securitytracker.com/id/1039990 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11905
CVE ID: CVE-2017-11906 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T22:24:37.662Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Information Disclosure Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11919. Additional
Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11919. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102078 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11906 - http://www.securitytracker.com/id/1039993 - https://www.exploit-db.com/exploits/43372/
CVE ID: CVE-2017-11907 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T01:41:48.623Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2
ruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102045 - http://www.securitytracker.com/id/1039991 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11907 - https://www.exploit-db.com/exploits/43370/
CVE ID: CVE-2017-11908 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T19:10:51.519Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11909, CVE-2017-11910, CVE-2017-
VE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102052 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11908 - http://www.securitytracker.com/id/1039990
CVE ID: CVE-2017-11909 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T23:26:25.286Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907
17-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11909 - https://www.exploit-db.com/exploits/43467/ - http://www.securitytracker.com/id/1039990 - http://www.securityfocus.com/bid/102085
CVE ID: CVE-2017-11910 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T16:39:11.304Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017
CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039990 - http://www.securityfocus.com/bid/102086 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11910
CVE ID: CVE-2017-11911 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T18:07:48.260Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907
17-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102087 - http://www.securitytracker.com/id/1039990 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11911 - https://www.exploit-db.com/exploits/43468/
CVE ID: CVE-2017-11912 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T01:02:02.690Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This
due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11912 - http://www.securityfocus.com/bid/102092 - http://www.securitytracker.com/id/1039990 -
guidance/advisory/CVE-2017-11912 - http://www.securityfocus.com/bid/102092 - http://www.securitytracker.com/id/1039990 - http://www.securitytracker.com/id/1039991
CVE ID: CVE-2017-11913 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T16:27:31.022Z Vendors: Microsoft Corporation Products: Internet Explorer Problem Types: Remote Code Execution Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-
e Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11913 - http://www.securitytracker.com/id/1039991 - http://www.securityfocus.com/bid/102091
CVE ID: CVE-2017-11914 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T02:41:49.419Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017
CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039990 - https://www.exploit-db.com/exploits/43713/ - http://www.securityfocus.com/bid/102088 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11914
CVE ID: CVE-2017-11916 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T18:29:20.619Z Vendors: Microsoft Corporation Products: ChakraCore Problem Types: Remote Code Execution Description: ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CV
1903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11918, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11916 - http://www.securityfocus.com/bid/102090
CVE ID: CVE-2017-11918 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T18:19:12.220Z Vendors: Microsoft Corporation Products: ChakraCore, Microsoft Edge Problem Types: Remote Code Execution Description: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CV
1890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, and CVE-2017-11930. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039990 - https://www.exploit-db.com/exploits/43469/ - http://www.securityfocus.com/bid/102089 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11918
CVE ID: CVE-2017-11919 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T04:03:47.648Z Vendors: Microsoft Corporation Products: ChakraCore, Internet Explorer, Microsoft Edge Problem Types: Information Disclosure Description: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Script
ormation to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11906. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102093 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11919 - http://www.securitytracker.com/id/1039993
CVE ID: CVE-2017-11927 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T22:50:36.086Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines the zone of a request, aka "Microsoft Windows Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
losure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102095 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11927 - http://www.securitytracker.com/id/1039997
CVE ID: CVE-2017-11930 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T17:39:04.253Z Vendors: Microsoft Corporation Products: ChakraCore, Internet Explorer Problem Types: Remote Code Execution Description: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CV
y, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, and CVE-2017-11916. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039991 - http://www.securityfocus.com/bid/102058 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11930
CVE ID: CVE-2017-11932 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T04:29:17.714Z Vendors: Microsoft Corporation Products: Microsoft Exchange Server Problem Types: Spoofing Description: Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11932 - http://www.securitytracker.com/id/1039996 - http://www.securityfocus.com/bid/102060
CVE ID: CVE-2017-11934 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T01:45:53.284Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Information Disclosure Description: Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039998 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934 - http://www.securityfocus.com/bid/10206
tps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934 - http://www.securityfocus.com/bid/102064
CVE ID: CVE-2017-11935 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T18:44:52.645Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Remote Code Execution Description: Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039989 - http://www.securityfocus.com/bid/102067 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11935
CVE ID: CVE-2017-11936 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-16T18:55:22.486Z Vendors: Microsoft Corporation Products: Microsoft SharePoint Problem Types: Elevation of Privilege Description: Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936 - http://www.securitytracker.com/id/1039995 - http://www.securityfocus.com/bid/102068
CVE ID: CVE-2017-11937 State: PUBLISHED Published: 2017-12-07T17:00:00Z Last Updated: 2024-09-16T21:07:43.706Z Vendors: Microsoft Corporation Products: Microsoft Malware Protection Engine Problem Types: Remote Code Execution Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". Additional Analyst N
mote code execution. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039972 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11937 - http://www.securityfocus.com/bid/102070
CVE ID: CVE-2017-11939 State: PUBLISHED Published: 2017-12-12T21:00:00Z Last Updated: 2024-09-17T00:20:35.710Z Vendors: Microsoft Corporation Products: Microsoft Office Problem Types: Information Disclosure Description: Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039994 - http://www.securityfocus.com/bid/102105 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11939