Lucene search

K
cve[email protected]CVE-2015-6089
HistoryNov 11, 2015 - 12:59 p.m.

CVE-2015-6089

2015-11-1112:59:00
CWE-119
web.nvd.nist.gov
27
cve-2015-6089
microsoft
vbscript
jscript
internet explorer
remote code execution
denial of service
memory corruption

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.462 Medium

EPSS

Percentile

97.4%

The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability.”

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.462 Medium

EPSS

Percentile

97.4%