CVE-2020-0811

HIGH7.5EPSS 3.4%

ChakraCore RCE Vulnerability

發布日:2022/5/24修改日:2024/2/16

描述

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka Chakra Scripting Engine Memory Corruption Vulnerability. This CVE ID is unique from CVE-2020-0812.

受影響套件(1)

NuGet/Microsoft.ChakraCorefrom 0, < 1.11.17

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

參考連結(5)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-0811
PATCHhttps://github.com/chakra-core/ChakraCore
WEBhttps://github.com/chakra-core/ChakraCore/pull/6385
WEBhttps://github.com/chakra-core/ChakraCore/pull/6385/commits/7e2c36091928d3f3aa58c01e1ef48bf6da777d09
WEBhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0811