Skip to content
fr Sign in
Not rated

CVE-2017-0028 A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory

Description

A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user, aka "Scripting Engine Memory Corruption Vulnerability."

Affected products and versions

Product Affected versions Fixed in
Microsoft ChakraCore Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft ChakraCore

The 3 CVEs of Microsoft ChakraCore →
CVE-2017-0152 A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects… Not rated CVE-2017-0196 An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive… Not rated
Track this CVE