Description
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0191 and CVE-2016-0193.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.ChakraCore | < 1.2.0.0 | 1.2.0.0 | GHSA-fjj8-gv4j-953p |
References
- 1035821 vdb-entry
- MS16-052 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-338
- 90008 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-16-355