CVE-2014-6363

🗓️ 11 Dec 2014 00:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 109 Views🌐 WEB

VBScript memory corruption vulnerability in Microsoft IE

Reporter	Title	Published	Views	Family All 17
zdt	Internet Explorer 8-11, IIS, CScript.exe/WScript.exe VBScript - CRegExp..Execute Use of Uninitialize	8 Nov 201600:00	–	zdt
Circl	CVE-2014-6363	7 Nov 201600:00	–	circl
Check Point Advisories	Microsoft Internet Explorer VBScript Memory Corruption (MS14-080; CVE-2014-6363)	9 Dec 201400:00	–	checkpoint_advisories
Cvelist	CVE-2014-6363	11 Dec 201400:00	–	cvelist
Exploit DB	Microsoft Internet Explorer 8/9/10/11 / IIS / CScript.exe/WScript.exe VBScript - CRegExp..Execute Use of Uninitialized Memory (MS14-080/MS14-084)	7 Nov 201600:00	–	exploitdb
Microsoft KB	MS14-084: Vulnerability in VBScript scripting engine could allow remote code execution: December 9, 2014	9 Dec 201400:00	–	mskb
Kaspersky	KLA10605 Code execution vulnerability in Microsoft VBScript	9 Dec 201400:00	–	kaspersky
NVD	CVE-2014-6363	11 Dec 201400:59	–	nvd
OpenVAS	Microsoft Windows VBScript Remote Code Execution Vulnerability (3016711)	10 Dec 201400:00	–	openvas
Packet Storm	VBScript CRegExp::Execute Uninitialized Memory Use	7 Nov 201600:00	–	packetstorm

NVD

Node

AND

OR

microsoft vbscriptMatch5.6

microsoft vbscriptMatch5.7

microsoft vbscriptMatch5.8

OR

microsoft internet_explorerMatch6

microsoft internet_explorerMatch7

microsoft internet_explorerMatch8

microsoft internet_explorerMatch9

microsoft internet_explorerMatch10

microsoft internet_explorerMatch11-

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-084
verisign	www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml
exploit-db	www.exploit-db.com/exploits/40721/
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080

Parameter	Position	Path	Description	CWE
oRegExp.Pattern	path	/Repro.html	VBScript RegExp.Execute path vulnerability: crafted pattern and input trigger memory corruption in vbscript.dll's CRegExp::Execute when executed from a webpage (IE).	CWE-399
RegExp.Execute input	path	/Repro.html	VBScript RegExp.Execute path vulnerability: crafted pattern and input trigger memory corruption in vbscript.dll's CRegExp::Execute when executed from a webpage (IE).	CWE-399
oRegExp.Pattern	path	/Repro.asp	VBScript RegExp.Execute path vulnerability in ASP page using VBScript, enabling memory corruption through crafted RegExp and input.	CWE-399
RegExp.Execute input	path	/Repro.asp	VBScript RegExp.Execute path vulnerability in ASP page using VBScript, enabling memory corruption through crafted RegExp and input.	CWE-399
oRegExp.Pattern	path	/Repro.vbs	VBScript memory corruption vulnerability triggered by RegExp.Execute with crafted pattern in VBScript engine when a VBScript file is processed.	CWE-399
RegExp.Execute input	path	/Repro.vbs	VBScript memory corruption vulnerability triggered by RegExp.Execute with crafted pattern in VBScript engine when a VBScript file is processed.	CWE-399

17 Jun 2026 00:12Current

7.6High risk

Vulners AI Score7.6

CVSS 29.3

EPSS0.28442

cve-2014-6363 vbscript.dll microsoft vbscript memory corruption vulnerability internet explorer