GHSA-ch84-pxpj-7hhm
ChakraCore RCE Vulnerability
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2018-8283
- CVSS_V3
- CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.
Paquets affectés
| Paquet | Versions |
|---|---|
| NuGet · Microsoft.ChakraCore | introduced 0, fixed 1.10.1 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2018-8283 ADVISORY
- https://github.com/chakra-core/ChakraCore/pull/5444 WEB
- https://github.com/chakra-core/ChakraCore/commit/b2f092ea42744d569fd102e8dd85d5524269bdd0 WEB
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8283 WEB
- https://web.archive.org/web/20210125211350/http://www.securityfocus.com/bid/104633 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |