GHSA-w3qr-8v4r-592m
ChakraCore information disclosure vulnerability
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2018-8452
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
Paquets affectés
| Paquet | Versions |
|---|---|
| NuGet · Microsoft.ChakraCore | introduced 0, fixed 1.11.1 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2018-8452 ADVISORY
- https://github.com/chakra-core/ChakraCore/commit/3f3544801cc01e9f54cab84b20602a3b5e29c3ef WEB
- https://github.com/chakra-core/ChakraCore PACKAGE
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8452 WEB
- https://web.archive.org/web/20210124203129/http://www.securityfocus.com/bid/105252 WEB
- https://web.archive.org/web/20221128100304/http://www.securitytracker.com/id/1041623 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |