Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2017-02-26T23:30:00

Updated: 2024-08-05T12:47:57.595Z

Reserved: 2016-09-09T00:00:00

Link: CVE-2017-0037

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-02-26T23:59:00.150

Modified: 2024-11-21T03:02:13.497

Link: CVE-2017-0037

cve-icon Redhat

No data.