Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7950
HistoryDec 04, 2018 - 2:32 p.m.

Remote Code Execution (RCE)

2018-12-0414:32:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.203 Low

EPSS

Percentile

96.4%

Microsoft ChakraCore is vulnerable to remote code execution. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, and CVE-2017-0238.