HTTP: Microsoft Edge CVE-2019-0658 Security Bypass
This signature detects an attempt to exploit an out of bound vulnerability in Microsoft Window's Edge. Successful exploitation could allow an attacker to security Bypass ASLR.
Extended Description
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0648.
Affected Products
Microsoft chakracore
References
CVE: CVE-2019-0658
Short Name
HTTP:STC:EDGE:CVE-2019-0658BYPS
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Bypass CVE-2019-0658 Edge Microsoft Security
Release Date
02/12/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3415
False Positive
Unknown
Vendors
Microsoft
CVSS Score
4.3