Attack (Attack ID:324162)

Release Date2016/07/12

Attack NameWEB-CLIENT Microsoft Scripting Engine Memory Corruption Vulnerability (CVE-2016-3259)

Severity

BUG ID

CVE ID

 

Description

The root cause is within the chakra.dll subcomponent that triggers an invalid pointer access condition when processing unshift arrays operation under specific conditions.
Impact:Remote code execution
Affected System:Windows
Additional References:CVE-2016-3259; MS16-084

 

Solution

Update vendor's patch.