ChakraCore information disclosure vulnerability

MEDIUM 4.3CVE-2017-0208 · GHSA-pjpr-2qqp-gprf · Published 12/04/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
Microsoft.ChakraCore NuGet	`< 1.4.3`	`1.4.3`

Description

An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2017-0208 · ADVISORY
chakra-core/ChakraCore#2834 · WEB
chakra-core/ChakraCore commit 54d6d08 · WEB
chakra-core/ChakraCore · PACKAGE
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208 · WEB
web.archive.org/web/20210124023848/http://www.securityfocus.com/bid/97460 · WEB
web.archive.org/web/20211201121401/http://www.securitytracker.com/id/1038234 · WEB
securityfocus.com/bid/97460 · Third Party Advisory
securitytracker.com/id/1038234

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free