CVE-2017-0037

Microsoft Internet Explorer 10 va 11 va Microsoft Edge'da mshtml.dll'dagi Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement funksiyasida turdagi chalkashlik bor, bu masofaviy tajovuzkorlarga ishlangan vektorlar orqali o'zboshimchalik bilan kodni bajarishga imkon beradi (Java Script Cascading Style va SheetsSC-ning Cascading Style) ishlab chiqilgan. TH elementida ishlaydi.

CVSS Vector

Manbalar

• http://www.securityfocus.com/bid/96088
• http://www.securitytracker.com/id/1037905
• http://www.securitytracker.com/id/1037906
• https://0patch.blogspot.si/2017/03/0patching-another-0-day-internet.html
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1011