CVE-2017-0203MediumCVSS 4.3

CVE-2017-0203

Published
April 11, 2017
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2017-0203 →

📋 Description

A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could use this vulnerability to trick a user into loading a web page with malicious content. To exploit the vulnerability, an attacker must either trick a user into loading a web page or visit a website. The web page could also be injected into a compromised website or ad network. The security update addresses the vulnerability by correcting how the CSP validates documents.

🎯 Affected products8

  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems

✅ Remediation

KB4015583 (Security Update) KB4015221 (Security Update) KB4015219 (Security Update) KB4015217 (Security Update)

🔗 References (5)