CVE-2017-0223

Опубликовано: 15 мая 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252.

Ссылки

http://www.securitytracker.com/id/1038425
https://github.com/Microsoft/ChakraCore/pull/2959
Patch
Third Party Advisory
http://www.securitytracker.com/id/1038425
https://github.com/Microsoft/ChakraCore/pull/2959
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.36015

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-0223

CVSS3: 4.2

msrc

около 8 лет назад

Scripting Engine Memory Corruption Vulnerability

GHSA-448h-7hmp-99fg

CVSS3: 9.8

github

около 3 лет назад

ChakraCore RCE Vulnerability

BDU:2017-01373

fstec