Description
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and CVE-2016-0191.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.ChakraCore | < 1.2.0.0 | 1.2.0.0 | GHSA-985m-xqv8-rh79 |
References
- 1035821 vdb-entry
- MS16-052 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-283
- 90009 vdb-entry