critical9.8
CVE-2017-11767
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, …
Impact
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Chakracore | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100838
- http://www.securitytracker.com/id/1039369
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767
- http://www.securityfocus.com/bid/100838
- http://www.securitytracker.com/id/1039369
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767