Lucene search
Veracode Vulnerability DatabaseVERACODE:6920HistoryJul 04, 2018 - 8:12 a.m.
Remote Code Execution (RCE)
2018-07-0408:12:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
31
EPSS
0.947
Percentile
99.3%
microsoft.chakracore is vulnerable to remote code execution. It exists because the CreateLabel function in IRBuilderAsmJs.cpp, does not properly check instrPrevparameter, causing memory corruption which allows attacker to trigger RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. This vulnerability also affects Microsoft Edge in Windows and Windows Server 2016.
Related
cvelist
cvelist
veracode
veracode
Remote Code Execution (RCE) Via Memory Corruption
2018-07-04 07:53:08
Remote Code Execution (RCE)
2018-07-05 03:47:19
Remote Code Execution (RCE)
2018-07-06 00:38:27
osv
osv
CVE-2017-11914
2017-12-12 21:29:01
CVE-2017-11895
2017-12-12 21:29:01
ChakraCore vulnerable to remote code execution
2022-05-14 01:06:50
prion
prion
Memory corruption
2017-12-12 21:29:00
Memory corruption
2017-12-12 21:29:00
Memory corruption
2017-12-12 21:29:00
nvd
nvd
cve
cve
github
github
ChakraCore vulnerable to remote code execution
2022-05-14 01:06:50
ChakraCore RCE Vulnerability
2022-05-17 00:11:58
ChakraCore RCE Vulnerability
2022-05-14 04:03:59
kaspersky
kaspersky
KLA11158 Multiple vunlerabilities in Microsoft Browsers
2017-12-12 00:00:00
KLA10918 Multiple vulnerabilities in Microsoft Products (ESU)
2017-12-12 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4054517)
2017-12-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4053580)
2017-12-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4053579)
2017-12-13 00:00:00
mskb
mskb
December 12, 2017—KB4053578 (OS Build 10586.1295)
2017-12-12 08:00:00
December 12, 2017—KB4054517 (OS Build 16299.125)
2017-12-12 08:00:00
December 12, 2017—KB4053580 (OS Build 15063.786)
2017-12-12 08:00:00
nessus
nessus
KB4053580: Windows 10 Version 1703 December 2017 Security Update
2017-12-12 00:00:00
trendmicroblog
trendmicroblog
talosblog
talosblog
Microsoft Patch Tuesday - December 2017
2017-12-12 15:32:00
cert
cert
threatpost
threatpost
Project Zero Chains Bugs for ‘aPAColypse Now’ Attack on Windows 10
2017-12-19 11:00:13
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2017-12-12 08:00:00
Scripting Engine Memory Corruption Vulnerability
2017-12-12 08:00:00
Scripting Engine Memory Corruption Vulnerability
2017-12-12 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11909)
2017-12-12 00:00:00
Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11895)
2017-12-12 00:00:00
packetstorm
packetstorm
Microsoft Edge Chakra JIT Escape Analysis Bug
2018-01-10 00:00:00
Microsoft Edge Chakra JIT asm.js Out-Of-Bounds Read
2018-01-10 00:00:00
symantec
symantec
zdt
zdt
Microsoft Edge Chakra - JavascriptGeneratorFunction::GetPropertyBuiltIns Type Confusion Exploit
2018-01-18 00:00:00
Microsoft Edge Chakra JIT - Escape Analysis Bug Exploit
2018-01-09 00:00:00
Microsoft Windows jscript!RegExpComp::Compile Heap Overflow Exploit
2017-12-19 00:00:00
seebug
seebug
