Vulnerability-Lookup

CNVD-2018-16173

Vulnerability from cnvd - Published: 2018-08-22

Title

Microsoft Internet Explorer和Edge信息泄露漏洞（CNVD-2018-16173）

Description

Internet Explorer是微软公司推出的一款网页浏览器。原称Microsoft Internet Explorer(6版本以前)和Windows Internet Explorer(7、8、9、10、11版本)，简称IE。Edge是微软为Windows 10打造的浏览器，特点是快速、安全。 Microsoft Internet Explorer和Edge存在信息泄露漏洞。该漏洞源于浏览器不当允许跨帧交互。攻击者可利用该漏洞从其他域获取浏览器帧或窗口状态。

Severity

中

Patch Name

Microsoft Internet Explorer和Edge信息泄露漏洞（CNVD-2018-16173）的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-8351

Impacted products

Name
['Microsoft Windows 7 SP1', 'Microsoft Windows 8.1', 'Microsoft Windows RT 8.1', 'Microsoft Windows 10', 'Microsoft Windows 10 1607', 'Microsoft Windows Server 2016', 'Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows 10 1703', 'Microsoft Windows 10 1709', 'Microsoft Windows Server 2012（Internet Explorer 10）', 'Microsoft Windows 10 1803', 'Microsoft Windows Server 2012 R2（Internet Explorer 11）', 'Microsoft Windows 10 1803（Edge）']

Name

['Microsoft Windows 7 SP1', 'Microsoft Windows 8.1', 'Microsoft Windows RT 8.1', 'Microsoft Windows 10', 'Microsoft Windows 10 1607', 'Microsoft Windows Server 2016', 'Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows 10 1703', 'Microsoft Windows 10 1709', 'Microsoft Windows Server 2012（Internet Explorer 10）', 'Microsoft Windows 10 1803', 'Microsoft Windows Server 2012 R2（Internet Explorer 11）', 'Microsoft Windows 10 1803（Edge）']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "105015"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-8351"
    }
  },
  "description": "Internet Explorer\u662f\u5fae\u8f6f\u516c\u53f8\u63a8\u51fa\u7684\u4e00\u6b3e\u7f51\u9875\u6d4f\u89c8\u5668\u3002\u539f\u79f0Microsoft Internet Explorer(6\u7248\u672c\u4ee5\u524d)\u548cWindows Internet Explorer(7\u30018\u30019\u300110\u300111\u7248\u672c)\uff0c\u7b80\u79f0IE\u3002Edge\u662f\u5fae\u8f6f\u4e3aWindows 10\u6253\u9020\u7684\u6d4f\u89c8\u5668\uff0c\u7279\u70b9\u662f\u5feb\u901f\u3001\u5b89\u5168\u3002\r\n\r\nMicrosoft Internet Explorer\u548cEdge\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6d4f\u89c8\u5668\u4e0d\u5f53\u5141\u8bb8\u8de8\u5e27\u4ea4\u4e92\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ece\u5176\u4ed6\u57df\u83b7\u53d6\u6d4f\u89c8\u5668\u5e27\u6216\u7a97\u53e3\u72b6\u6001\u3002",
  "discovererName": "Seonung Jang (@Seonunghardt) of Stealien, Jun Kokatsu, Windows \u0026 Devices Group - Operating System Security Team, and James Lee @Windowsrcer of Kryptos Logic",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-16173",
  "openTime": "2018-08-22",
  "patchDescription": "Internet Explorer\u662f\u5fae\u8f6f\u516c\u53f8\u63a8\u51fa\u7684\u4e00\u6b3e\u7f51\u9875\u6d4f\u89c8\u5668\u3002\u539f\u79f0Microsoft Internet Explorer(6\u7248\u672c\u4ee5\u524d)\u548cWindows Internet Explorer(7\u30018\u30019\u300110\u300111\u7248\u672c)\uff0c\u7b80\u79f0IE\u3002Edge\u662f\u5fae\u8f6f\u4e3aWindows 10\u6253\u9020\u7684\u6d4f\u89c8\u5668\uff0c\u7279\u70b9\u662f\u5feb\u901f\u3001\u5b89\u5168\u3002\r\n\r\nMicrosoft Internet Explorer\u548cEdge\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6d4f\u89c8\u5668\u4e0d\u5f53\u5141\u8bb8\u8de8\u5e27\u4ea4\u4e92\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ece\u5176\u4ed6\u57df\u83b7\u53d6\u6d4f\u89c8\u5668\u5e27\u6216\u7a97\u53e3\u72b6\u6001\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Internet Explorer\u548cEdge\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2018-16173\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows 7 SP1",
      "Microsoft Windows 8.1",
      "Microsoft Windows RT 8.1",
      "Microsoft Windows 10",
      "Microsoft Windows 10 1607",
      "Microsoft Windows Server 2016",
      "Microsoft Windows Server 2008 R2  SP1",
      "Microsoft Windows 10 1703",
      "Microsoft Windows 10 1709",
      "Microsoft Windows Server 2012\uff08Internet Explorer 10\uff09",
      "Microsoft Windows 10 1803",
      "Microsoft Windows Server 2012 R2\uff08Internet Explorer 11\uff09",
      "Microsoft Windows 10 1803\uff08Edge\uff09"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-8351",
  "serverity": "\u4e2d",
  "submitTime": "2018-08-15",
  "title": "Microsoft Internet Explorer\u548cEdge\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2018-16173\uff09"
}

CVE-2018-8351 (GCVE-0-2018-8351)

Vulnerability from cvelistv5 – Published: 2018-08-15 17:00 – Updated: 2024-08-05 06:54

Summary

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

Severity ?

No CVSS data available.

CWE

Information Disclosure

Assigner

microsoft

References

URL

Tags

	http://www.securitytracker.com/id/1041457	vdb-entryx_refsource_SECTRACK
	https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/105015	vdb-entryx_refsource_BID

Impacted products

Vendor

Product

Version

Microsoft

Internet Explorer 11

Affected: Windows 10 for 32-bit Systems
Affected: Windows 10 for x64-based Systems
Affected: Windows 10 Version 1607 for 32-bit Systems
Affected: Windows 10 Version 1607 for x64-based Systems
Affected: Windows 10 Version 1703 for 32-bit Systems
Affected: Windows 10 Version 1703 for x64-based Systems
Affected: Windows 10 Version 1709 for 32-bit Systems
Affected: Windows 10 Version 1709 for x64-based Systems
Affected: Windows 10 Version 1803 for 32-bit Systems
Affected: Windows 10 Version 1803 for x64-based Systems
Affected: Windows 7 for 32-bit Systems Service Pack 1
Affected: Windows 7 for x64-based Systems Service Pack 1
Affected: Windows 8.1 for 32-bit systems
Affected: Windows 8.1 for x64-based systems
Affected: Windows RT 8.1
Affected: Windows Server 2008 R2 for x64-based Systems Service Pack 1
Affected: Windows Server 2012 R2
Affected: Windows Server 2016

	Microsoft	Microsoft Edge	Affected: Windows 10 for 32-bit Systems Affected: Windows 10 for x64-based Systems Affected: Windows 10 Version 1803 for 32-bit Systems Affected: Windows 10 Version 1803 for x64-based Systems
	Microsoft	Internet Explorer 10	Affected: Windows Server 2012

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:54:36.058Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041457",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041457"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351"
          },
          {
            "name": "105015",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105015"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Internet Explorer 11",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "Windows 10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1803 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Windows 7 for 32-bit Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "Windows 7 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "Windows 8.1 for 32-bit systems"
            },
            {
              "status": "affected",
              "version": "Windows 8.1 for x64-based systems"
            },
            {
              "status": "affected",
              "version": "Windows RT 8.1"
            },
            {
              "status": "affected",
              "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
            },
            {
              "status": "affected",
              "version": "Windows Server 2012 R2"
            },
            {
              "status": "affected",
              "version": "Windows Server 2016"
            }
          ]
        },
        {
          "product": "Microsoft Edge",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "Windows 10 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1803 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Windows 10 Version 1803 for x64-based Systems"
            }
          ]
        },
        {
          "product": "Internet Explorer 10",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "Windows Server 2012"
            }
          ]
        }
      ],
      "datePublic": "2018-08-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka \"Microsoft Browser Information Disclosure Vulnerability.\" This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-08-16T09:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "1041457",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041457"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351"
        },
        {
          "name": "105015",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105015"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2018-8351",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Internet Explorer 11",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Windows 10 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 for x64-based Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1607 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1607 for x64-based Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1703 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1703 for x64-based Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1709 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1709 for x64-based Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1803 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1803 for x64-based Systems"
                          },
                          {
                            "version_value": "Windows 7 for 32-bit Systems Service Pack 1"
                          },
                          {
                            "version_value": "Windows 7 for x64-based Systems Service Pack 1"
                          },
                          {
                            "version_value": "Windows 8.1 for 32-bit systems"
                          },
                          {
                            "version_value": "Windows 8.1 for x64-based systems"
                          },
                          {
                            "version_value": "Windows RT 8.1"
                          },
                          {
                            "version_value": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
                          },
                          {
                            "version_value": "Windows Server 2012 R2"
                          },
                          {
                            "version_value": "Windows Server 2016"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Microsoft Edge",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Windows 10 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 for x64-based Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1803 for 32-bit Systems"
                          },
                          {
                            "version_value": "Windows 10 Version 1803 for x64-based Systems"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Internet Explorer 10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Windows Server 2012"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Microsoft"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka \"Microsoft Browser Information Disclosure Vulnerability.\" This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041457",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041457"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351"
            },
            {
              "name": "105015",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105015"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2018-8351",
    "datePublished": "2018-08-15T17:00:00",
    "dateReserved": "2018-03-14T00:00:00",
    "dateUpdated": "2024-08-05T06:54:36.058Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-16173

CVE-2018-8351 (GCVE-0-2018-8351)

Tags

Sightings

Nomenclature