ChakraCore RCE Vulnerability

GHSA-ghwq-7v3r-5433 · CVE-2017-0252

Published May 17, 2022 · Modified Feb 16, 2024

Description

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-0252
WEB https://github.com/Microsoft/ChakraCore/pull/2959
WEB https://github.com/chakra-core/ChakraCore/commit/f95aa762f89adb4c5ae187e2ee11c37add784ee9
PACKAGE https://github.com/chakra-core/ChakraCore

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes