{"id":"CVE-2017-11767","state":"PUBLISHED","title":"ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine","description":"ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\".","publishedAt":"2017-11-02T19:00:00.000Z","updatedAt":"2024-09-16T19:14:56.968Z","severity":null,"assigner":"microsoft","products":["Microsoft Corporation ChakraCore"],"affected":[{"vendor":"Microsoft Corporation","product":"ChakraCore","versions":[{"version":"ChakraCore","status":"affected"}]}],"references":["http://www.securitytracker.com/id/1039369","http://www.securityfocus.com/bid/100838","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:12.617Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/11xxx/CVE-2017-11767.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-11767","state":"PUBLISHED","datePublished":"2017-11-02T19:00:00.000Z","dateUpdated":"2024-09-16T19:14:56.968Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2017-07-31T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\"."}],"affected":[{"vendor":"Microsoft Corporation","product":"ChakraCore","versions":[{"version":"ChakraCore","status":"affected"}]}],"references":[{"url":"http://www.securitytracker.com/id/1039369","name":"1039369","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/100838","name":"100838","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Remote Code Execution","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"microsoft","dateUpdated":"2017-11-03T09:57:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8"},"datePublic":"2017-09-14T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","DATE_PUBLIC":"2017-09-14T00:00:00","ID":"CVE-2017-11767","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"ChakraCore","version":{"version_data":[{"version_value":"ChakraCore"}]}}]},"vendor_name":"Microsoft Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\"."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Remote Code Execution"}]}]},"references":{"reference_data":[{"name":"1039369","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1039369"},{"name":"100838","refsource":"BID","url":"http://www.securityfocus.com/bid/100838"},{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767","refsource":"CONFIRM","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securitytracker.com/id/1039369","name":"1039369","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/100838","name":"100838","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11767","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T18:19:39.209Z"}}]}}}