CVE-2017-11767

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

Score

CVSS 3.0 9.8 Critical

Status

Modified - secure@microsoft.com

Published

2017-11-02

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Chakracore (Microsoft)
• Chakracore (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/100838
• http://www.securitytracker.com/id/1039369
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767