Remote Code Execution (RCE)

🗓️ 03 Dec 2018 04:14:07Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

Microsoft ChakraCore vulnerabilit

Reporter	Title	Published	Views	Family All 125
zdt	Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix) Exploit	3 Apr 201800:00	–	zdt
zdt	Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix 2) Exploit	3 Apr 201800:00	–	zdt
BDU FSTEC	Vulnerability of ChakraCore JavaScript script handlers and Microsoft Edge browsers: caused by operations beyond the buffer in memory, allowing attackers to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	20 Apr 201800:00	–	bdu_fstec

Vulners

Node

OR

microsoft.chakracore microsoft.chakracoreRange1.4.0–1.8.1cpp

microsoft.chakracore.vc140 microsoft.chakracore.vc140Range1.4.1–1.8.1cpp

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0872
github	www.github.com/Microsoft/ChakraCore/commit/8b229ce07220eb81c81329566df9b01fea571d1a
github	www.github.com/Microsoft/ChakraCore/pull/4812
securityfocus	www.securityfocus.com/bid/103267
securitytracker	www.securitytracker.com/id/1040507
github	www.github.com/Microsoft/ChakraCore/wiki/Roadmap

15 May 2019 06:18Current

8High risk

Vulners AI Score8

CVSS 27.6

CVSS 37.5

EPSS0.66845

microsoft chakracore vulnerability remote code execution array buffer bug globopt.cpp authenticated user cve id.