The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2017-11813,     CVE-2017-11822)

  - An information disclosure vulnerability exists when     Internet Explorer improperly handles objects in memory.
    An attacker who successfully exploited the vulnerability     could obtain information to further compromise the users     system.  (CVE-2017-11790)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2017-11793, CVE-2017-11810)

Detections

Analytics

Security Updates for Internet Explorer (October 2017)

high Nessus Plugin ID 104895

Version 1.10

Version 1.9

Version 1.10 Nov 13, 2025, 4:18 PM CVSSv3 score source (changed from "CVE-2017-11822" to none) Plugin Feed: 202511131618
Version 1.9 Sep 27, 2025, 7:42 AM Plugin metadata (Added version specific CPEs for Internet Explorer) Plugin Feed: 202509270742