Lucene search

K
cve[email protected]CVE-2015-6056
HistoryOct 14, 2015 - 1:59 a.m.

CVE-2015-6056

2015-10-1401:59:00
CWE-119
web.nvd.nist.gov
27
cve-2015-6056
jscript
vbscript
memory corruption
remote code execution
internet explorer

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.651 Medium

EPSS

Percentile

97.9%

The (1) JScript and (2) VBScript engines in Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability.”

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.651 Medium

EPSS

Percentile

97.9%