GitHub Advisoryadvisory · NuGet

GHSA-fvpg-qx3g-7mp7 High severity vulnerability that affects Microsoft.ChakraCore

HIGH Published 2019-04-09 Modified 2021-09-10 Official page ↗

Aliases: CVE-2019-0771
Ecosystem: NuGet
Packages: Microsoft.ChakraCore
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-787
Reviewed: 2020-06-16

Affected packages

• NuGet Microsoft.ChakraCore: < 1.11.7 → fixed in 1.11.7

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0773, CVE-2019-0783.

Related

Alias · CVE (1)

CVE-2019-0771 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… vulnerability

Weakness · CWE (1)

CWE-787 Out-of-bounds Write weakness

References