CVE-2018-0939

MEDIUM4.3EPSS 12.0%

ChakraCore information disclosure vulnerability

發布日:2022/5/13修改日:2024/2/16

描述

ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.

受影響套件(1)

NuGet/Microsoft.ChakraCorefrom 0, < 1.8.2

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM4.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

參考連結(6)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-0939
PATCHhttps://github.com/chakra-core/ChakraCore
WEBhttps://github.com/chakra-core/ChakraCore/commit/090277e7a5ea1d938777acb92e7b6759936ea974
WEBhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0939
WEBhttps://web.archive.org/web/20201021051922/http://www.securitytracker.com/id/1040507
WEBhttps://web.archive.org/web/20210124145017/http://www.securityfocus.com/bid/103305