Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7952
HistoryDec 04, 2018 - 2:38 p.m.

Remote Code Execution (RCE)

2018-12-0414:38:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20

0.203 Low

EPSS

Percentile

96.4%

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a buffer over-read vulnerability which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.