A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory when the engine is rendered in Internet Explorer.
In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer, and then convince a user to view the website. An attacker could also embed an ActiveX control that is marked "safe for initialization" in an application or Microsoft Office document that hosts the Internet Explorer rendering engine.
The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could be used to exploit this vulnerability.
To learn more about the vulnerability, go to CVE-2017-0158.
To learn more about the vulnerability, go to CVE-2017-0158.