CVE-2017-0130

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in CVE-2017-0040.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
Microsoft CorporationInternet ExplorerThe scripting engine in Microsoft Internet Explorer 9 through 11

References

Timeline

Published
Mar 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-01317.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01327.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01337.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01347.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01354.2Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuCVE-2017-01367.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01377.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01387.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01404.2Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuCVE-2017-01417.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01438.8The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anCVE-2017-01448.8The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
CVE-2017-0130: High severity, CVSS 7.5 | Vulnix