CVE-2018-0873 : Security Advisory and Response

Remote code execution vulnerability in ChakraCore and Microsoft Edge

Understanding CVE-2018-0873

This CVE involves a critical remote code execution vulnerability affecting ChakraCore and Microsoft Edge in various versions of Microsoft Windows 10 and Windows Server 2016.

What is CVE-2018-0873?

The vulnerability, known as "Chakra Scripting Engine Memory Corruption Vulnerability," is caused by how the Chakra scripting engine manages objects in memory.
This CVE is distinct from other identified vulnerabilities, including CVE-2018-0872, CVE-2018-0874, and several others.

The Impact of CVE-2018-0873

Remote code execution is possible in ChakraCore and Microsoft Edge on different versions of Microsoft Windows 10 and Windows Server 2016.

Technical Details of CVE-2018-0873

Critical details about the vulnerability

Vulnerability Description

Remote code execution vulnerability in ChakraCore and Microsoft Edge due to memory corruption in the Chakra scripting engine.

Affected Systems and Versions

Products: ChakraCore, Microsoft Edge
Vendor: Microsoft Corporation
Versions: ChakraCore, Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016.

Exploitation Mechanism

Attackers can exploit this vulnerability remotely to execute arbitrary code on the affected systems.

Mitigation and Prevention

Protecting systems from CVE-2018-0873

Immediate Steps to Take

Apply security patches provided by Microsoft promptly.
Consider implementing network segmentation to limit the impact of potential attacks.
Educate users about safe browsing practices and the importance of not clicking on suspicious links or downloading unknown files.

Long-Term Security Practices

Regularly update and patch all software and operating systems to prevent vulnerabilities.
Conduct regular security audits and penetration testing to identify and address potential weaknesses.

Patching and Updates

Stay informed about security advisories and updates from Microsoft.
Ensure all systems are updated with the latest security patches to mitigate the risk of exploitation.