Patchfirst
Patchfirst
CVE-2019-1106 EPSS 9.2%

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…

Microsoft · Microsoft Edge

Summary

A remote code execution vulnerability exists in how the Chakra scripting engine handles objects in memory in Microsoft Edge. Microsoft Edge users are affected.

Official description · CVE.org

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1107.

Breakdown
19.1 / 100
Exploited
Not confirmed
Reports
0
Tactics
4/15

How an attack unfolds

Based on mappings. Select a step to see the evidence.

  1. How attackers get in

  2. What they do

Disclosed on 29 Jul 2019. No public exploit code or confirmed exploitation is recorded.

techniques

4 , grouped by in kill-chain order 4

Initial AccessTA0001

Drive-by Compromise T1189
MITRE CTID mapping of the CVE · how it is exploited

ExecutionTA0002

Exploitation for Client Execution T1203
MITRE CTID mapping of the CVE · how it is exploited
Hijack Execution Flow T1574 also Stealth
MITRE CTID mapping of the CVE · primary impact

ImpactTA0040

Application or System Exploitation T1499.004
MITRE CTID mapping of the CVE · primary impact

Detection

0 rules for this CVE · 49 general rules for its techniques

Rules for this CVE

0 that reference CVE-2019-1106 directly.

CVE-specific rules are not available in this build. Search SigmaHQ ↗

General rules for this CVE’s techniques

These detect the technique in general, not this specific vulnerability.

Drive-by CompromiseT11893 general rules
Exploitation for Client ExecutionT120335 general rules
All 35 on SigmaHQ ↗
Hijack Execution FlowT15748 general rules
Application or System ExploitationT1499.0043 general rules

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

Am I affected? What do I upgrade to?

From GitHub Security Advisories and OSV

1 package in 1 ecosystem. Main package: Microsoft.ChakraCore.

NuGetMicrosoft.ChakraCoreGHSA-mg98-x2cm-4cpf

Upgrade to 1.11.11 or later

Fixes this CVE and 44 other known vulnerabilities in this package (CVE-2016-0191, CVE-2016-0193, +42).

Set the version to 1.11.11 or later in your .csproj.

The first fix for CVE-2019-1106.

Affected versions

If you runUpgrade to
All versions before 1.11.111.11.11

“Up to” means the second version is the fix and is not affected.

Check your lockfile against all CVEs

What security researchers reported

Not named in any threat report yet

References

1 link, grouped by NVD tag

x_refsource_MISC 1

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1106
↑ ↓ chooseEnter openEsc close