The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists when     affected Microsoft scripting engines do not properly     handle objects in memory. The vulnerability could allow     an attacker to detect specific files on the user's     computer.  (CVE-2017-8529)

  - A remote code execution vulnerability exists when     Microsoft browsers improperly access objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user.  (CVE-2017-8750)

  - A spoofing vulnerability exists when Internet Explorer     improperly handles specific HTML content. An attacker     who successfully exploited this vulnerability could     trick a user into believing that the user was visiting a     legitimate website. The specially crafted website could     either spoof content or serve as a pivot to chain an     attack with other vulnerabilities in web services.
    (CVE-2017-8733)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user.  (CVE-2017-8747,     CVE-2017-8749)

  - A remote code execution vulnerability exists in the way     that Microsoft browser JavaScript engines render content     when handling objects in memory. The vulnerability could     corrupt memory in such a way that an attacker could     execute arbitrary code in the context of the current     user. In a web-based attack scenario, an attacker could     host a specially crafted website that is designed to     exploit the vulnerability through Microsoft browsers and     then convince a user to view the website. An attacker     could also embed an ActiveX control marked &quot;safe     for initialization&quot; in an application or Microsoft     Office document that hosts the related rendering engine.
    The attacker could also take advantage of compromised     websites, and websites that accept or host user-provided     content or advertisements. These websites could contain     specially crafted content that could exploit the     vulnerability. An attacker who successfully exploited     the vulnerability could gain the same user rights as the     current user.  (CVE-2017-8741, CVE-2017-8748)

  - An information disclosure vulnerability exists in     Microsoft browsers due to improper parent domain     verification in certain functionality. An attacker who     successfully exploited the vulnerability could obtain     specific information that is used in the parent domain.
    (CVE-2017-8736)

Detections

Analytics

Security Updates for Internet Explorer (September 2017)

high Nessus Plugin ID 104896

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Nov 13, 2025, 4:18 PM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2017-8741" to "CVE-2017-8750") CVSSv3 score source (changed from "manual" to none) Plugin Feed: 202511131618
Version 1.11 Sep 27, 2025, 7:42 AM Plugin metadata (Added version specific CPEs for Internet Explorer) Plugin Feed: 202509270742
Version 1.10 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354