Kaspersky Threats

KLA11108
Multiple ACE vulnerabilities in ChakraCore

Updated: 01/24/2020

Detect date ?	10/10/2017
Severity ?	Critical
Description	Multiple memory handling vulnerabilities have been found in ChakraCore. Malicious users can exploit these vulnerabilities to execute arbitrary code.
Affected products	ChakraCore
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	Commit Commit CVE-2017-11797 CVE-2017-11801 CVE-2017-11812 CVE-2017-11809 CVE-2017-11807 CVE-2017-11796 CVE-2017-11792 CVE-2017-11806 CVE-2017-11811 CVE-2017-11802 CVE-2017-11804 CVE-2017-11808 CVE-2017-11805 CVE-2017-11799
Impacts ?	ACE [?]
Related products	ChakraCore
CVE-IDS ?	CVE-2017-117977.6Critical CVE-2017-118017.6Critical CVE-2017-118117.5Critical CVE-2017-118127.5Critical CVE-2017-117927.5Critical CVE-2017-117967.5Critical CVE-2017-118057.5Critical CVE-2017-118087.5Critical CVE-2017-118047.5Critical CVE-2017-118097.5Critical CVE-2017-117997.5Critical CVE-2017-118067.5Critical CVE-2017-118027.5Critical CVE-2017-118077.5Critical CVE-2017-118217.5Critical
Microsoft official advisories	Microsoft Security Update Guide