2 lines
3.9 KiB
JSON
2 lines
3.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"Microsoft Edge","vendor":"Microsoft","versions":[{"status":"affected","version":"Windows 10 Version 1803 for 32-bit Systems"},{"status":"affected","version":"Windows 10 Version 1803 for x64-based Systems"},{"status":"affected","version":"Windows 10 Version 1803 for ARM64-based Systems"},{"status":"affected","version":"Windows 10 Version 1809 for 32-bit Systems"},{"status":"affected","version":"Windows 10 Version 1809 for x64-based Systems"}]},{"product":"ChakraCore","vendor":"Microsoft","versions":[{"status":"affected","version":"Windows 10 Version 1809 for ARM64-based Systems"},{"status":"affected","version":"Windows Server 2019"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*","matchCriteriaId":"D7809F78-8D56-4925-A8F9-4119B973A667","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*","matchCriteriaId":"7CB85C75-4D35-480E-843D-60579EC75FCB","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*","matchCriteriaId":"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*","matchCriteriaId":"DB79EE26-FC32-417D-A49C-A1A63165A968","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783."},{"lang":"es","value":"Se presenta una vulnerabilidad de ejecución de código remota en la manera en que el motor de scripting de ChakraCore maneja los objetos en la memoria, también se conoce como \"Scripting Engine Memory Corruption Vulnerability\". Este ID de CVE es diferente de los CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783."}],"id":"CVE-2019-0639","lastModified":"2026-06-17T02:08:35.940","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.6,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":4.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-04-08T23:29:00.603","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639"},{"source":"secure@microsoft.com","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-122/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-122/"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-190"}],"source":"nvd@nist.gov","type":"Primary"}]}
|