CVE-2016-7200
HIGH KEV RANSOMWAREMicrosoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
Title source: llmExploitation Summary
CVE-2016-7200 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 28, 2022, with confirmed use in ransomware campaigns. EIP tracks 4 public exploits from researchers including Google Security Research, Brian Pak, theori-io.
AI-analyzed exploit summary This exploit leverages a type confusion vulnerability in Chakra's Array.filter implementation, where a variable array is incorrectly treated as an integer array, leading to heap corruption and information leakage. The PoC demonstrates both memory corruption and out-of-bounds writes.
Description
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
Exploits (4)
This exploit leverages a type confusion vulnerability in Chakra's Array.filter implementation, where a variable array is incorrectly treated as an integer array, leading to heap corruption and information leakage. The PoC demonstrates both memory corruption and out-of-bounds writes.
This exploit leverages a type confusion vulnerability (CVE-2016-7200) and an information leak (CVE-2016-7201) in ChakraCore to achieve remote code execution. It demonstrates the exploitation by launching notepad.exe via WinExec.
This repository contains a functional exploit for CVE-2016-7200 and CVE-2016-7201, targeting Microsoft Edge's Chakra JavaScript engine. The exploit leverages an info leak and type confusion vulnerability to achieve remote code execution (RCE), demonstrated by launching notepad.exe or triggering an INT 3 breakpoint.
This repository contains a functional proof-of-concept exploit for CVE-2016-7200 and CVE-2016-7201, targeting Microsoft Edge's Chakra JavaScript engine. The exploit leverages an information leak and type confusion vulnerability to achieve remote code execution (RCE), demonstrated by launching notepad.exe or triggering an INT 3 breakpoint.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H