Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7967
HistoryDec 05, 2018 - 2:21 a.m.

Remote Code Execution (RCE)

2018-12-0502:21:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.923

Percentile

99.0%

Microsoft ChakraCore is vulnerable to remote code execution. This is due a lack of validation for return objects without any properties in AsmJs.cpp, which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151.