Unscored CVE-2017-11819 EUVD-2017-3420GHSA-xpxc-7j8q-3794

Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers hand…

Published Oct 13, 2017 · Updated Sep 17, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Windows 7 SP1 Platform: Windows

Description

Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability".

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Windows 7 SP1	Microsoft Windows 7 SP1	—

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819
1039537 vdb-entry
101121 vdb-entry