KLA10676 Multiple vulnerabilities in Microsoft JScript and VBScript

Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Improperly handling objects in memory can be exploited remotely via a specially designed website to execute arbitrary code;
2. Lack of ASLR restrictions can be exploited remotely via a specially designed website to bypass security restrictions;
3. Improper memory content disclosure can be exploited locally via memory manipulations to obtain sensitive information.

Technical details

Vulnerability (1) related to way in which memory objects handling at Internet Explorer.

Original advisories

CVE-2015-2482

CVE-2015-6055

CVE-2015-6059

CVE-2015-6052

Exploitation

Public exploits exist for this vulnerability.

Related products

Microsoft-VBScript-engine

CVE list

CVE-2015-2482 critical

CVE-2015-6055 critical

CVE-2015-6059 warning

CVE-2015-6052 warning

KB list

3089659

3094995

3094996

3093983

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• RLF

Read Local Files. Exploitation of vulnerabilities with this impact can lead to reading some inaccessible files. Files that can be read depends on conсrete program errors.

Affected Products

• Microsoft JScript from 5.7 through 5.8Microsoft VBScript from 5.7 through 5.8