CVE Database
/

CVE-2017-11909

Back to search

CVE-2017-11909

Published: Dec 12, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.

VendorProductVersions

Microsoft Corporation

ChakraCore, Microsoft Edge

affected
Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016.

References

43467
exploit
x_refsource_EXPLOIT-DB
1039990
vdb-entry
x_refsource_SECTRACK
102085
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now