Chakra 脚本引擎内存损坏漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2018-8617
• https://www.anquanke.com/post/id/159537
• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
• https://www.fortinet.com/blog/threat-research/an-analysis-of-microsoft-edge-chakra-javascriptarray-typeid-hand
• https://avd.aliyun.com/detail?id=AVD-2019-0539
• https://www.anquanke.com/post/id/150922
• https://advisories.gitlab.com/nuget/microsoft.chakracore/CVE-2019-1051/
• https://github.com/ommadawn46/chakra-type-confusions
• https://nvd.nist.gov/vuln/detail/CVE-2018-8618
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8467
• https://nvd.nist.gov/vuln/detail/CVE-2019-0539
• https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2016/ms16-068
• https://avd.aliyun.com/detail?id=AVD-2019-1366

Related Vulnerabilities

• IEI 威強電工業電腦｜iVEC-IEI Virtualization Edge Computer - 存在4個漏洞
• PoCCVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection
• Apache Airflow Providers Edge3 设计缺陷漏洞
• PoCCVE-2021-29203: HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass
• PoCCVE-2021-42063: SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting
• PoCknowledgetree-installer: KnowledgeTree Installer Exposure
• Microsoft Edge 脚本引擎 缓冲区操作限制不当漏洞
• HPE Edgeline Infrastructure Manager 认证绕过漏洞
• Microsoft Edge Chakra JavaScript引擎CVE-2017-0141内存损坏漏洞
• Microsoft Edge Array.join CVE-2016-7189类型混淆漏洞
• AVEVA Edge SetBytesToManagedControl 不安全的反序列化漏洞
• AVEVA Edge LoadImportedLibraries 外部实体注入漏洞