HTTP: Microsoft Edge Chakra Java Script Engine OP Memset Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Edge Chakra Java Script Engine. A successful attack can lead to arbitrary code execution in the security context of the target user.

Extended Description

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, and CVE-2017-11871.

References

BugTraq: 101728

CVE: CVE-2017-11873

URL: https://bugs.chromium.org/p/project-zero/issues/detail?id=1357

Short Name

HTTP:STC:SCRIPT:MS-IE-JS-OP-RCE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Edge Chakra Java Script Engine OP Memset Remote Code Execution

Extended Description

References

Found a potential security threat?