CVE-2017-8724 - Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirectin

CVE-2017-8724

Summary

Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is unique from CVE-2017-8735.

References

http://www.securityfocus.com/bid/100777
http://www.securitytracker.com/id/1039326
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8724

Vulnerable Configurations

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	100777
confirm	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8724
sectrack	1039326

Last major update

03-10-2019 - 00:03

Published

13-09-2017 - 01:29

Last modified

03-10-2019 - 00:03