GHSA-h6m7-jphx-f9p5
ChakraCore information disclosure vulnerability
At a glance
- Published
- Updated
- CVE
- CVE-2017-8659
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine not properly handling objects in memory, aka "Scripting Engine Information Disclosure Vulnerability".
Affected packages
| Package | Versions |
|---|---|
| NuGet · Microsoft.ChakraCore | introduced 0, fixed 1.6.1 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-8659 ADVISORY
- https://github.com/chakra-core/ChakraCore/pull/3509 WEB
- https://github.com/chakra-core/ChakraCore/commit/2500e1cdc12cb35af73d5c8c9b85656aba6bab4d WEB
- https://github.com/chakra-core/ChakraCore PACKAGE
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8659 WEB
- https://web.archive.org/web/20210612224703/http://www.securityfocus.com/bid/100029 WEB
- https://web.archive.org/web/20211127144809/http://www.securitytracker.com/id/1039095 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |