Microsoft: Scripting Engine Information Disclosure Vulnerability

Description

An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.

Analysis

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer. An attacker who successfully exploited the vulnerability could obtain information to further compromise the users system.

Affected Applications

Internet Explorer 10
Internet Explorer 11
Internet Explorer 9

CVE References

CVE-2018-0987

Other References

https://portal.msrc.microsoft.com/en-us/security-guidance