Description
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and CVE-2016-0193.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.ChakraCore | < 1.2.0.0 | 1.2.0.0 | GHSA-j69r-w67w-gf35 |
References
- http://www.zerodayinitiative.com/advisories/ZDI-16-282
- 1035821 vdb-entry
- MS16-052 vendor-advisory
- 90010 vdb-entry