Out-of-bounds write in ChakraCore

🗓️ 28 Jul 2021 18:57:19Reported by GitHub Advisory DatabaseType

Out-of-bounds write in ChakraCore, remote code execution vulnerability exists in scripting engine handling objects in memory

Reporter	Title	Published	Views	Family All 135
Information Security Automation	Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies	22 Mar 202001:15	–	avleonov
BDU FSTEC	The vulnerability of the Internet Explorer web browser’s script handler allows a hacker to execute arbitrary code.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internet Explorer web browser’s script handler allows a hacker to execute arbitrary code.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge’s web browser, based on EdgeHTML, relates to memory object handling flaws, allowing an attacker to execute arbitrary code.	13 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge’s web browser, based on EdgeHTML, relates to memory object handling flaws, allowing an attacker to execute arbitrary code.	13 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browser based on EdgeHTML and the Internet Explorer browser, related to memory object handling flaws, allows an attacker to execute arbitrary code.	13 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	18 Mar 202000:00	–	bdu_fstec
CNVD	Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CNVD-2020-19962)	11 Mar 202000:00	–	cnvd
CNVD	Microsoft ChakraCore and Edge Buffer Overflow Vulnerability	11 Mar 202000:00	–	cnvd
CNVD	Remote Code Execution Vulnerability in Multiple Microsoft Products (CNVD-2020-19966)	11 Mar 202000:00	–	cnvd

Vulners

Node

microsoft chakracoreRange<1.11.17nuget

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-0848
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0848
github	www.github.com/advisories/GHSA-5p67-cp9c-hqw4

01 Feb 2023 05:06Current

2.8Low risk

Vulners AI Score2.8

CVSS 3.17.5

CVSS 27.6

EPSS0.08249

CWE-787