GitHub Advisoryadvisory · NuGet

GHSA-6jf5-rmhv-38cw High severity vulnerability that affects Microsoft.ChakraCore

HIGH Published 2019-04-09 Modified 2021-09-02 Official page ↗

Aliases: CVE-2019-0639
Ecosystem: NuGet
Packages: Microsoft.ChakraCore
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-190
Reviewed: 2020-06-16

Affected packages

• NuGet Microsoft.ChakraCore: < 1.11.7 → fixed in 1.11.7

Description

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.

Related

Alias · CVE (1)

CVE-2019-0639 A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… vulnerability

Weakness · CWE (1)

CWE-190 Integer Overflow or Wraparound weakness

References