CVE-2017-0149 | Microsoft Internet Explorer - Browser Engine Operational Intel

Executive Risk Summary

"A memory corruption vulnerability exists in Microsoft Internet Explorer 9 through 11, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This vulnerability can be exploited by an unauthenticated attacker, potentially leading to system compromise."

Anticipated Attack Path

1. Initial Exploitation: Attacker crafts a malicious web site
2. Privilege Escalation: Exploits memory corruption vulnerability in Internet Explorer
3. Persistence: Establishes a foothold on the compromised system

Am I Vulnerable?

Verify Internet Explorer version and apply relevant patches
Implement web content filtering to block malicious web sites
Monitor system logs for suspicious activity

Operational Audit Arsenal

Target Type Process

Target Asset iexplore.exe

Standard Path C:\Program Files\Internet Explorer\iexplore.exe

PowerShell

# 🛠️ Senior Engineer Universal Audit
# Target: iexplore.exe (Process)
$Targets = 'iexplore.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}