Lucene search
Veracode Vulnerability DatabaseVERACODE:7973HistoryDec 05, 2018 - 2:46 a.m.
Remote Code Execution (RCE)
2018-12-0502:46:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.146 Low
EPSS
Percentile
95.8%
Microsoft ChakraCore is vulnerable to remote code execution. This is due to an issue with capturing the name of a function expression in one of the param scope functions where the name symbols are not added to the body. This allows a remote attacker to execute arbitrary code in the context of the authenticated user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft.chakracore | le | 1.4.1 | |
| microsoft.chakracore.vc140 | eq | 1.4.1 |
Related
nvd
nvd
CVE-2017-0152
2017-07-17 13:18:11
cve
cve
CVE-2017-0152
2017-07-17 13:18:11
osv
osv
CVE-2017-0152
2017-07-17 13:18:11
prion
prion
Remote code execution
2017-07-17 13:18:00
cvelist
cvelist
CVE-2017-0152
2017-03-28 00:00:00