CVE-2009-1920

🗓️ 08 Sep 2009 22:00:00Reported by microsoftType

The JScript scripting engine in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted web site

Reporter	Title	Published	Views	Family All 13
Check Point Advisories	JScript Scripting Engine Web Pages Decoding Code Execution (MS09-045; CVE-2009-1920)	8 Sep 200900:00	–	checkpoint_advisories
Cvelist	CVE-2009-1920	8 Sep 200922:00	–	cvelist
NVD	CVE-2009-1920	8 Sep 200922:30	–	nvd
OpenVAS	Microsoft JScript Scripting Engine Remote Code Execution Vulnerability (971961)	10 Sep 200900:00	–	openvas
OpenVAS	Microsoft JScript Scripting Engine Remote Code Execution Vulnerability (971961)	10 Sep 200900:00	–	openvas
Prion	Remote code execution	8 Sep 200922:30	–	prion
Positive Technologies	PT-2009-4380 · Microsoft · Jscript	8 Sep 200900:00	–	ptsecurity
securityvulns	ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability	9 Sep 200900:00	–	securityvulns
securityvulns	Microsoft Security Bulletin MS09-045 - Critical Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961)	9 Sep 200900:00	–	securityvulns
securityvulns	Microsoft Windows JavaScript engine memory corruption	9 Sep 200900:00	–	securityvulns

NVD

Node

microsoft windows_xpsp2professional_x64

Source	Link
us-cert	www.us-cert.gov/cas/techalerts/TA09-251A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045

23 Apr 2026 00:35Current

7.5High risk

Vulners AI Score7.5

CVSS 29.3

EPSS0.43094