EDB-43467
doswindowsVERIFIED
Microsoft Edge Chakra JIT - BackwardPass::RemoveEmptyLoopAfterMemOp Does not Insert Branches
CVE-2017-11909
Google Security Research1/9/2018
CVE-2017-11909
7.5HIGHChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objec
Опубликовано: 12/12/2017Обновлено: 4/20/2025
Описание
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.
ИИ-АнализНа базе ИИ
Затронутые продукты
microsoftedge
-
microsoftwindows_10
1511
microsoftwindows_10
1607
microsoftwindows_10
1703
microsoftwindows_10
1709
microsoftwindows_server_2016
-
microsoftchakracore
Доступные эксплойты (1)
Ссылки
- http://www.securityfocus.com/bid/102085Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039990Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11909PatchVendor Advisory
- https://www.exploit-db.com/exploits/43467/ExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/102085Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039990Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11909PatchVendor Advisory
- https://www.exploit-db.com/exploits/43467/ExploitThird Party AdvisoryVDB Entry