Description (CNA)
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft Corporation / ChakraCore | affected ChakraCore |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1039369
- http://www.securityfocus.com/bid/100838
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767
ADP enrichment
No English description supplied.