Vulnerability-Lookup

CNVD-2017-20512

Vulnerability from cnvd - Published: 2017-08-11

Title

Microsoft Internet Explorer安全绕过漏洞（CNVD-2017-20512）

Description

Microsoft Windows 10和Windows Server 2016都是美国微软（Microsoft）公司的产品。前者是一套供个人电脑使用的操作系统，后者是一套服务器操作系统。Internet Explorer(IE)是一款Windows操作系统附带的Web浏览器。 Microsoft Windows中的IE 11中存在安全绕过漏洞，该漏洞源于程序未能验证UMCI策略。攻击者可利用该漏洞绕过Device Guard User Mode Code Integrity (UCMI)策略。

Severity

中

Patch Name

Microsoft Internet Explorer安全绕过漏洞（CNVD-2017-20512）的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-8625

Impacted products

Name
Microsoft Internet Explorer 11

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100063"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-8625"
    }
  },
  "description": "Microsoft Windows 10\u548cWindows Server 2016\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u4f9b\u4e2a\u4eba\u7535\u8111\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\uff0c\u540e\u8005\u662f\u4e00\u5957\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002Internet Explorer(IE)\u662f\u4e00\u6b3eWindows\u64cd\u4f5c\u7cfb\u7edf\u9644\u5e26\u7684Web\u6d4f\u89c8\u5668\u3002\r\n\r\nMicrosoft Windows\u4e2d\u7684IE 11\u4e2d\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u9a8c\u8bc1UMCI\u7b56\u7565\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7Device Guard User Mode Code Integrity (UCMI)\u7b56\u7565\u3002",
  "discovererName": "Oddvar Moe (@oddvarmoe) working for Advania AS. Matt Nelson (@enigma0x3) of SpecterOps.",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-20512",
  "openTime": "2017-08-11",
  "patchDescription": "Microsoft Windows 10\u548cWindows Server 2016\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u4f9b\u4e2a\u4eba\u7535\u8111\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\uff0c\u540e\u8005\u662f\u4e00\u5957\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002Internet Explorer(IE)\u662f\u4e00\u6b3eWindows\u64cd\u4f5c\u7cfb\u7edf\u9644\u5e26\u7684Web\u6d4f\u89c8\u5668\u3002\r\n\r\nMicrosoft Windows\u4e2d\u7684IE 11\u4e2d\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u9a8c\u8bc1UMCI\u7b56\u7565\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7Device Guard User Mode Code Integrity (UCMI)\u7b56\u7565\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Internet Explorer\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2017-20512\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Microsoft Internet Explorer  11"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-8625",
  "serverity": "\u4e2d",
  "submitTime": "2017-08-09",
  "title": "Microsoft Internet Explorer\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2017-20512\uff09"
}

CVE-2017-8625 (GCVE-0-2017-8625)

Vulnerability from cvelistv5 – Published: 2017-08-08 21:00 – Updated: 2024-09-16 16:58

Summary

Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability".

Severity

No CVSS data available.

CWE

Security Feature Bypass

Assigner

microsoft mitre root

References

5 references

URL	Tags
https://portal.msrc.microsoft.com/en-US/security-…
https://posts.specterops.io/umci-vs-internet-expl…
http://www.securityfocus.com/bid/100063	vdb-entry
http://www.securitytracker.com/id/1039112	vdb-entry
https://oddvar.moe/2017/08/13/bypassing-device-gu…

Impacted products

1 product

Vendor	Product	Version
Microsoft Corporation	Internet Explorer	Affected: Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.

Date Public

2017-08-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:41:24.174Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442"
          },
          {
            "name": "100063",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100063"
          },
          {
            "name": "1039112",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039112"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Internet Explorer",
          "vendor": "Microsoft Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016."
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka \"Internet Explorer Security Feature Bypass Vulnerability\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Security Feature Bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-25T18:57:14.656Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625"
        },
        {
          "url": "https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442"
        },
        {
          "name": "100063",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/100063"
        },
        {
          "name": "1039112",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1039112"
        },
        {
          "url": "https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2017-8625",
    "datePublished": "2017-08-08T21:00:00.000Z",
    "dateReserved": "2017-05-03T00:00:00.000Z",
    "dateUpdated": "2024-09-16T16:58:29.913Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.