Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7947
HistoryDec 04, 2018 - 2:23 p.m.

Remote Code Execution (RCE)

2018-12-0414:23:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.203 Low

EPSS

Percentile

96.4%

Microsoft ChakraCore is vulnerable to remote code execution. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0224, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.