GHSA-5rcr-q3rx-j7vr
Out-of-bounds write
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2019-1107
- CVSS_V3
- CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1106.
Paquets affectés
| Paquet | Versions |
|---|---|
| NuGet · Microsoft.ChakraCore | introduced 0, fixed 1.11.11 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2019-1107 ADVISORY
- https://github.com/chakra-core/ChakraCore/commit/214dec9461f9acb9a4b9004368d2a81e0c125652 WEB
- https://github.com/chakra-core/ChakraCore/commit/75162b7f2d8ac2b37d17564e9c979ba1bae707e8 WEB
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1107 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |