CVE-2017-11905: Buffer Overflow
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11905?
CVE-2017-11905 has a severity rating of Critical, as it allows arbitrary code execution in the context of the current user.
How do I fix CVE-2017-11905?
To mitigate CVE-2017-11905, update Microsoft Edge and ChakraCore to versions that have addressed the vulnerability.
What impact does CVE-2017-11905 have on my system?
CVE-2017-11905 can allow an attacker to execute arbitrary code, potentially compromising system security.
Which versions of Microsoft Edge are affected by CVE-2017-11905?
CVE-2017-11905 affects Microsoft Edge in Windows 10 versions 1511, 1607, 1703, and 1709.
Is ChakraCore affected by CVE-2017-11905?
Yes, ChakraCore versions up to and including 1.7.5 are vulnerable to CVE-2017-11905.