PT-2020-5213

CVE-2020-17131

·

Published

2020-12-08

·

Updated

2023-12-31

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Chakra Scripting Engine (affected versions not specified)
Description The issue is related to a memory corruption vulnerability in the Chakra Scripting Engine, which can be exploited by an attacker to gain access to protected information. This vulnerability is associated with a buffer overflow. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
GHSA-QWWG-GC55-QQRV
ZDI-20-1413
Found an issue in the description? Have something to add? Feel free to write us 👾