CVE-2018-0979 : Exploit Details and Defense Strategies

Microsoft Edge and ChakraCore are affected by a vulnerability known as "Chakra Scripting Engine Memory Corruption Vulnerability," allowing remote code execution due to memory handling issues.

Understanding CVE-2018-0979

What is CVE-2018-0979?

The vulnerability in Microsoft Edge and ChakraCore enables remote code execution by mishandling objects in memory.

The Impact of CVE-2018-0979

The vulnerability poses a significant risk as it allows attackers to execute code remotely, potentially compromising affected systems.

Technical Details of CVE-2018-0979

Vulnerability Description

The vulnerability arises from improper memory handling by the Chakra scripting engine in Microsoft Edge and ChakraCore.

Affected Systems and Versions

Microsoft Edge on various Windows 10 versions and Windows Server 2016
ChakraCore

Exploitation Mechanism

Attackers can exploit this vulnerability remotely by crafting malicious code to target the memory handling flaw in the Chakra scripting engine.

Mitigation and Prevention

Immediate Steps to Take

Apply security updates provided by Microsoft promptly
Consider using alternative browsers until the patch is applied

Long-Term Security Practices

Regularly update software and systems to mitigate future vulnerabilities
Implement network security measures to detect and prevent remote code execution attempts

Patching and Updates

It is crucial to install the security updates released by Microsoft to address the vulnerability and enhance the security of affected systems.