Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11729 State: PUBLISHED Published: 2017-07-29T05:00:00 Last Updated: 2024-08-05T18:19:39.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode.html - https://github.com/libming/libming/issues/79 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-11730 State: PUBLISHED Published: 2017-07-29T05:00:00 Last Updated: 2024-08-05T18:19:37.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-opcode_24.html - https://github.com/libming/libming/issues/81 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-11731 State: PUBLISHED Published: 2017-07-29T05:00:00 Last Updated: 2024-08-05T18:19:39.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/84 - http://somevulnsofadlab.blogspot.jp/2017/07/libminginvalid-memory-read-in-opcode.html - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-11732 State: PUBLISHED Published: 2017-07-29T05:00:00 Last Updated: 2024-08-05T18:19:38.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html - http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in-dcputs.html - https://github.com/libming/libming/issues/80 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-11733 State: PUBLISHED Published: 2017-07-29T05:00:00 Last Updated: 2024-08-05T18:19:37.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/78 - https://lists.debian.org/debian-lts-announce/2017/11/msg00022.html - http://somevulnsofadlab.blogspot.jp/2017/07/libmingnull-pointer-dereference-in.html - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-11734 State: PUBLISHED Published: 2017-07-29T05:00:00 Last Updated: 2024-08-05T18:19:38.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in_24.html - https://github.com/libming/libming/issues/83 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2017-11735 State: REJECTED Published: 2017-07-31T13:00:00 Last Updated: 2017-10-09T04:57:01 Description: No description available.
CVE ID: CVE-2017-11736 State: PUBLISHED Published: 2017-07-29T14:00:00Z Last Updated: 2024-09-16T20:37:07.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via the tags array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/304
CVE ID: CVE-2017-11737 State: PUBLISHED Published: 2017-07-29T14:00:00Z Last Updated: 2024-09-16T17:58:16.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vstakhov/rspamd/releases/tag/1.6.3 - https://github.com/vstakhov/rspamd/issues/1738
CVE ID: CVE-2017-11738 State: PUBLISHED Published: 2019-05-23T15:29:28 Last Updated: 2024-08-05T18:19:38.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://application.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734 - http://www.securityfocus.com/bid/108470 - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-
focus.com/bid/108470 - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-11738.html
CVE ID: CVE-2017-11739 State: PUBLISHED Published: 2019-05-23T15:27:26 Last Updated: 2024-08-05T18:19:38.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widget" with a "Custom HTML or Text" field. Once this widget is created, it will be loaded on the dashboard where it was added. An attacker can abuse this functionality by creating a "Utility Widget" that contains malicious JavaScript code, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.co
icious JavaScript code, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://application.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734 - http://www.securityfocus.com/bid/108469
CVE ID: CVE-2017-11740 State: PUBLISHED Published: 2019-05-23T15:21:10 Last Updated: 2024-08-05T18:19:39.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse this functionality by uploading a malicious script that can be executed on the remote system. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://application.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18734
CVE ID: CVE-2017-11741 State: PUBLISHED Published: 2017-08-08T19:00:00 Last Updated: 2024-08-05T18:19:38.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/0 - https://www.exploit-db.com/exploits/43224/ - https://m4.rkw.io/blog/cve201711741-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4023.html
CVE ID: CVE-2017-11742 State: PUBLISHED Published: 2017-07-30T14:00:00 Last Updated: 2024-08-05T18:19:39.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan horse ADVAPI32.DLL in the current working directory because of an untrusted search path, aka DLL hijacking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libexpat/libexpat/issues/82 - http://www.securityfocus.com/bid/100147
CVE ID: CVE-2017-11743 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:19:39.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. An attacker with knowledge of the hard-coded credential and the ability to communicate directly with the Mirth Connect management console may be able to intercept sensitive patient information. The admin account password is hard-coded as $K8t1ng throughout the application, and is the same across all installations. Customers do not have the option to change the Mirth Connect admin account password. The
same across all installations. Customers do not have the option to change the Mirth Connect admin account password. The Mirth Connect admin account is created during the Connex install. The plaintext account password is hard-coded multiple times in the Connex install and update scripts. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/75 - http://www.securityfocus.com/bid/100086
CVE ID: CVE-2017-11744 State: PUBLISHED Published: 2017-07-30T15:00:00Z Last Updated: 2024-09-16T23:16:29.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/modxcms/revolution/issues/13564
CVE ID: CVE-2017-11746 State: PUBLISHED Published: 2017-07-30T16:00:00 Last Updated: 2024-08-05T18:19:38.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a "kill `cat /pathname/tenshi.pid`" command. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-18 - https://github.com/inversepath/tenshi/issues/6
CVE ID: CVE-2017-11747 State: PUBLISHED Published: 2017-07-30T16:00:00 Last Updated: 2024-08-05T18:19:38.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tinyproxy.pid modification before a root script executes a "kill `cat /run/tinyproxy/tinyproxy.pid`" command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tinyproxy/tinyproxy/issues/106 - https://lists.debian.org/debian-lts-announce/2020/03/msg00037.htm
- https://github.com/tinyproxy/tinyproxy/issues/106 - https://lists.debian.org/debian-lts-announce/2020/03/msg00037.html
CVE ID: CVE-2017-11748 State: PUBLISHED Published: 2017-07-30T16:00:00Z Last Updated: 2024-09-16T20:51:36.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file. Additional Analyst Notes: - CVE Program Container: References: - http://blog.pentest.space/2017/07/spider-player-253-unsafe-dll-loading.html
CVE ID: CVE-2017-11749 State: PUBLISHED Published: 2017-07-30T16:00:00Z Last Updated: 2024-09-16T23:25:30.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file. Additional Analyst Notes: - CVE Program Container: References: - http://blog.pentest.space/2017/07/023-ftp-commander-802-unsafe-dll.html
CVE ID: CVE-2017-11750 State: PUBLISHED Published: 2017-07-30T17:00:00 Last Updated: 2024-08-05T18:19:38.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/632
CVE ID: CVE-2017-11751 State: PUBLISHED Published: 2017-07-30T17:00:00 Last Updated: 2024-08-05T18:19:38.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/631
CVE ID: CVE-2017-11752 State: PUBLISHED Published: 2017-07-30T18:00:00 Last Updated: 2024-08-05T18:19:39.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/628
CVE ID: CVE-2017-11753 State: PUBLISHED Published: 2017-07-30T18:00:00 Last Updated: 2024-08-05T18:19:38.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/629
CVE ID: CVE-2017-11754 State: PUBLISHED Published: 2017-07-30T18:00:00 Last Updated: 2024-08-05T18:19:39.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an OpenPixelCache call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/633
CVE ID: CVE-2017-11755 State: PUBLISHED Published: 2017-07-30T18:00:00 Last Updated: 2024-08-05T18:19:39.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an AcquireSemaphoreInfo call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/634
CVE ID: CVE-2017-11756 State: PUBLISHED Published: 2017-07-30T18:00:00 Last Updated: 2024-08-05T18:19:38.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe=config_upload, and then using user.php/music/add/ to upload the code. Additional Analyst Notes: - CVE Program Container: References: - https://lncken.cn/?p=359
CVE ID: CVE-2017-11757 State: PUBLISHED Published: 2017-07-31T14:00:00Z Last Updated: 2024-09-17T02:00:34.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte allocation. The _srvLnaConnectMP1 function is affected. Additional Analyst Notes: - CVE Program Container: References: - http://supportservices.actian.com/support-services/security-center#announcements - https://twitter.com/SecuriTeam_S
s: - http://supportservices.actian.com/support-services/security-center#announcements - https://twitter.com/SecuriTeam_SSD/status/815567538318954496 - https://blogs.securiteam.com/index.php/archives/2924
CVE ID: CVE-2017-11760 State: PUBLISHED Published: 2017-07-31T17:00:00Z Last Updated: 2024-09-16T16:38:00.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data, as demonstrated by uploading as an image within the description text area. Additional Analyst Notes: - CVE Program Container: References: - https://track.projeqtor.org/view/main.php?directAccess=true&objectClass=Ticket&objectId=2884
CVE ID: CVE-2017-11761 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-17T03:02:51.278Z Vendors: Microsoft Corporation Products: Microsoft Exchange Server Problem Types: Information Disclosure Description: Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability" Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761 - http://www.securitytracker.com/id/1039320 - http://www.securityfocus
m/en-US/security-guidance/advisory/CVE-2017-11761 - http://www.securitytracker.com/id/1039320 - http://www.securityfocus.com/bid/100731
CVE ID: CVE-2017-11762 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T03:14:33.469Z Vendors: Microsoft Corporation Products: Microsoft Graphics Component Problem Types: Remote Code Execution Description: The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763. Additional Analyst Notes: - CVE Program C
mote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11762 - http://www.securitytracker.com/id/1039536 - http://www.securityfocus.com/bid/101108
CVE ID: CVE-2017-11763 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T03:02:39.763Z Vendors: Microsoft Corporation Products: Microsoft Graphics Component Problem Types: Remote Code Execution Description: The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763. Additional Analyst Notes: - CVE Program C
mote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-11763. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11763 - http://www.securitytracker.com/id/1039536 - http://www.securityfocus.com/bid/101109
CVE ID: CVE-2017-11764 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-16T19:00:34.606Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, and CVE-201
29, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, and CVE-2017-8756. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42765/ - http://www.securitytracker.com/id/1039342 - http://www.securityfocus.com/bid/100726 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11764
CVE ID: CVE-2017-11765 State: PUBLISHED Published: 2017-10-13T13:00:00Z Last Updated: 2024-09-17T01:17:06.395Z Vendors: Microsoft Corporation Products: Windows Kernel Problem Types: Information Disclosure Description: The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11784, CVE-2017-11785, and CVE-2017-11814. Additional Analyst Not
re Vulnerability". This CVE ID is unique from CVE-2017-11784, CVE-2017-11785, and CVE-2017-11814. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039526 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11765 - http://www.securityfocus.com/bid/101111
CVE ID: CVE-2017-11766 State: PUBLISHED Published: 2017-09-13T01:00:00Z Last Updated: 2024-09-17T01:37:06.895Z Vendors: Microsoft Corporation Products: Microsoft Edge Problem Types: Remote Code Execution Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8731, CVE-2017-8734, and CVE-2017-8751. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039326 - http://www.se
ditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039326 - http://www.securityfocus.com/bid/100729 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11766
CVE ID: CVE-2017-11767 State: PUBLISHED Published: 2017-11-02T19:00:00Z Last Updated: 2024-09-16T19:14:56.968Z Vendors: Microsoft Corporation Products: ChakraCore Problem Types: Remote Code Execution Description: ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039369 - http://www.securityfocus.com/bid/100838 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767