CVE-2017-0252: Improper Restriction of Operations within the Bounds of a Memory Buffer

May 17, 2022 (updated July 27, 2023)

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka “Scripting Engine Memory Corruption Vulnerability”. This vulnerability is unique from CVE-2017-0223.

References

github.com/Microsoft/ChakraCore/pull/2959
github.com/advisories/GHSA-ghwq-7v3r-5433
github.com/chakra-core/ChakraCore/commit/f95aa762f89adb4c5ae187e2ee11c37add784ee9
nvd.nist.gov/vuln/detail/CVE-2017-0252

Detect and mitigate CVE-2017-0252 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →