GHSA-xgcc-r2f3-rq6p
ChakraCore information disclosure vulnerability
At a glance
- Published
- Updated
- CVE
- CVE-2018-0939
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.
Affected packages
| Package | Versions |
|---|---|
| NuGet · Microsoft.ChakraCore | introduced 0, fixed 1.8.2 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-0939 ADVISORY
- https://github.com/chakra-core/ChakraCore/commit/090277e7a5ea1d938777acb92e7b6759936ea974 WEB
- https://github.com/chakra-core/ChakraCore PACKAGE
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0939 WEB
- https://web.archive.org/web/20201021051922/http://www.securitytracker.com/id/1040507 WEB
- https://web.archive.org/web/20210124145017/http://www.securityfocus.com/bid/103305 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |