CVE-2018-8319

Summary

CVE	CVE-2018-8319
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2018-07-11 00:29:00 UTC
Updated	2018-09-05 12:19:00 UTC
Description	A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.

Risk And Classification

Problem Types: CWE-682

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Microsoft	Research Javascript Cryptography Library	1.4	All	All	All
Application	Microsoft	Research Javascript Cryptography Library	1.4	All	All	All

References

Reference	Source	Link	Tags
Microsoft MSR JavaScript Cryptography Library CVE-2018-8319 Remote Security Bypass Vulnerability	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
Microsoft Research JavaScript Cryptography Library Lets Remote Users Bypass Security Restrictions on the Target System - SecurityTracker	SECTRACK	www.securitytracker.com	Third Party Advisory, VDB Entry
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319	CONFIRM	portal.msrc.microsoft.com	Patch, Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

980935 Nodejs (npm) Security Update for msrcrypto (GHSA-qg3g-2mgh-33j8)