CVE-2011-0031

2011-02-0901:00:07

CWE-200

microsoft

web.nvd.nist.gov

(cve-2011-0031

jscript

vbscript

windows server 2008 r2

windows 7

information disclosure vulnerability)

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0.031

Percentile

91.3%

JSON

The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka “Scripting Engines Information Disclosure Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_7Match-

microsoftwindows_server_2008Matchr2itanium

microsoftwindows_server_2008Matchr2x64

VendorProductVersionCPE
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_7	-	cpe:2.3:o:microsoft:windows_7:-:::::::*
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2::itanium:::::
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2::x64:::::