The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     Microsoft Edge handles objects in memory. The     vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of     the current user. An attacker who successfully exploited     the vulnerability could gain the same user rights as the     current user.  (CVE-2017-0238)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    This vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user.  (CVE-2017-0226)

  - A spoofing vulnerability exists when Microsoft browsers     render SmartScreen Filter. An attacker who successfully     exploited this vulnerability could trick a user by     redirecting the user to a specially crafted website. The     specially crafted website could then either spoof     content or serve as a pivot to chain an attack with     other vulnerabilities in web services.  (CVE-2017-0231)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2017-0222)

  - A security feature bypass vulnerability exists in     Internet Explorer that allows for bypassing Mixed     Content warnings. This could allow for the loading of     unsecure content (HTTP) from secure locations (HTTPS).
    (CVE-2017-0064)

Detections

Analytics

Security Updates for Internet Explorer (May 2017)

high Nessus Plugin ID 104893

Version 1.10

Version 1.9

Version 1.8

Version 1.10 Sep 27, 2025, 7:42 AM Plugin metadata (Added version specific CPEs for Internet Explorer) Plugin Feed: 202509270742
Version 1.9 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.8 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311