Remote Code Execution (RCE)

🗓️ 28 Jun 2018 06:40:19Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 41 Views

Microsoft ChakraCore remote code execution vulnerabilit

Reporter	Title	Published	Views	Family All 179
0day.today	Microsoft Edge Chakra JIT - Magic Value Type Confusion Exploit	23 May 201800:00	–	zdt
0day.today	Microsoft Edge Chakra JIT - BoundFunction::NewInstance Out-of-Bounds Read Exploit	12 Jul 201800:00	–	zdt
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Internet Explorer’s JavaScript script handlers allows a hacker to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Internet Explorer’s JavaScript script handlers allows a hacker to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec

Vulners

Node

microsoft.chakracore microsoft.chakracoreRange1.2.0–1.8.3csharp

OR

microsoft.chakracore.vc140 microsoft.chakracore.vc140Range1.4.1–1.8.3csharp

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8139
github	www.github.com/Microsoft/ChakraCore/commit/ee5dfabc51728f97f6d69e89c88af088251b6b76
securityfocus	www.securityfocus.com/bid/103977
securitytracker	www.securitytracker.com/id/1040844
exploit-db	www.exploit-db.com/exploits/45012/

15 May 2019 06:18Current

8High risk

Vulners AI Score8

CVSS 27.6

CVSS 37.5

EPSS0.76997

microsoft chakracore remote code execution type confusion memory corruption cve id