35 matches found
Microsoft Edge Chakra JIT SetConcatStrMultiItemBE Type Confusion
Microsoft Edge: Chakra: JIT: Type confusion with hoisted SetConcatStrMultiItemBE instructions CVE-2018-8229 Here's a PoC: function optstr for let i = 0; i .var s9.var = LdSlot s32s18l53.var s7.var = LdSlot s20s18l51.var s8.var = LdSlot s19s18l52.var s1Object.var = LdA 0x7FFFF47A0000...
CVE-2018-8229
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227...
CVE-2018-8229
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227...
Remote code execution
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8229...
CVE-2018-8229
Summary (CVE-2018-8229) : A remote code execution vulnerability exists in the Chakra scripting engine’s handling of objects in memory, affecting Microsoft Edge and ChakraCore . The root cause is memory corruption within Chakra’s in-memory object handling, leading to arbitrary code execution with ...
KB4284880: Windows 10 Version 1607 and Windows Server 2016 June 2018 Security Update
The remote Windows host is missing security update 4284880. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An attacker who successfully...
KB4284860: Windows 10 June 2018 Security Update
The remote Windows host is missing security update 4284860. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An attacker who successfully...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8229)
A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2016-8229
A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed...
CVE-2016-8229
CVE-2016-8229 refers to a cross-site request forgery in Lenovo Service Bridge (LSB) on Windows, in versions before 4. The vulnerability could be exploited by an attacker who has access to the DHCP server used by the system running LSB. Public details in the connected documents confirm the affecte...
Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - Lenovo Support US
No description provided...
CVE-2014-8229
CVE-2014-8229 entry is rejected/not used per the initial description.
CVE-2015-8229
CVE-2015-8229 affects Huawei eSpace U2980/U2990 unified gateway. The root cause is that the devices do not apply error correction for certain signaling packets, allowing remote authenticated users to trigger a denial of service. Affected versions are U2980 (before V100R001C10) and U2990 (before V...
Security Advisory - DoS Vulnerability in Huawei U2990 and U2980
Huawei U2990 and U2980 have a DoS vulnerability caused by no error correction mechanism when handling specific signaling packets. An attacker can send malformed packets to cause a denial of service condition in some services of the U2990 and U2980. Vulnerability ID: HWPSIRT-2015-09025 This...
