HTTP: Microsoft Edge CVE-2017-0208 Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Edge. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the user.

Extended Description

An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."

Affected Products

Microsoft edge

References

CVE: CVE-2017-0208

Short Name

HTTP:STC:IE:CVE-2017-0208-IOV

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Edge CVE-2017-0208 Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?