CVE-2018-0931 - ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability"

Back Back to CVE browser

HIGH

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability"

Published Mar 14, 2018

7.5

HIGH

CVSS 3.0

EPSS 11.44%

Description

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.

Affected products

Vendor Microsoft Corporation Product ChakraCore, Microsoft Edge Default
n/a
- Version
  ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft Corporation

ChakraCore, Microsoft Edge

n/a

Version	Status	Constraints
ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (6)

http://www.securityfocus.com/bid/103273
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-h575-j3ph-hjvc
Advisory
https://github.com/chakra-core/ChakraCore/commit/46c98f0645dfa58654036c8a7417e67e81e4706a
https://nvd.nist.gov/vuln/detail/CVE-2018-0931
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0931
x_refsource_CONFIRMPatchVendor Advisory
https://web.archive.org/web/20210124144712/http://www.securityfocus.com/bid/103273

Link	Providers	Tags
http://www.securityfocus.com/bid/103273		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-h575-j3ph-hjvc		Advisory
https://github.com/chakra-core/ChakraCore/commit/46c98f0645dfa58654036c8a7417e67e81e4706a
https://nvd.nist.gov/vuln/detail/CVE-2018-0931
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0931		x_refsource_CONFIRMPatchVendor Advisory
https://web.archive.org/web/20210124144712/http://www.securityfocus.com/bid/103273