[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Microsoft Edge Security Feature Bypass Vulnerability - CVE-2017-11872

ID: oval:org.secpod.oval:def:42713Date: (C)2017-11-15   (M)2024-03-06
Class: VULNERABILITYFamily: windows




A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests. The vulnerability allows Microsoft Edge to bypass Cross-Origin Resource Sharing (CORS) redirect restrictions, and to follow redirect requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how affected Microsoft Edge handles redirect requests.

Platform:
Microsoft Windows Server 2016
Microsoft Windows 10
Product:
Microsoft Edge
Reference:
CVE-2017-11872
CVE    1
CVE-2017-11872
CPE    8
cpe:/o:microsoft:windows_10:1703:::x64
cpe:/o:microsoft:windows_10:1703:::x86
cpe:/o:microsoft:windows_10:1703
cpe:/o:microsoft:windows_server_2016:::x64
...

© SecPod Technologies