CVE-2017-11767

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 9.5%

probabilidade de exploração

9.5%top 5% das CVEs

exploração observada

nãonenhuma fonte reporta

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

Produtos afetados

Microsoft Corporation · ChakraCore

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767 http://www.securityfocus.com/bid/100838 http://www.securitytracker.com/id/1039369