Lucene search
HistoryMay 13, 2015 - 10:59 a.m.
CVE-2015-1686
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.771
Percentile
98.2%
The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka “VBScript and JScript ASLR Bypass.”
Affected configurations
Node
microsoftinternet_explorerMatch8
ORmicrosoftinternet_explorerMatch9
ORmicrosoftinternet_explorerMatch10
ORmicrosoftinternet_explorerMatch11-
Node
microsoftvbscriptMatch5.6
ORmicrosoftvbscriptMatch5.7
ORmicrosoftvbscriptMatch5.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | internet_explorer | 8 | cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 9 | cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 10 | cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 11 | cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:* |
| microsoft | vbscript | 5.6 | cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:* |
| microsoft | vbscript | 5.7 | cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:* |
| microsoft | vbscript | 5.8 | cpe:2.3:a:microsoft:vbscript:5.8:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-1686
2015-05-13 10:00:00
symantec
symantec
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1686)
2015-05-12 00:00:00
prion
prion
Security feature bypass
2015-05-13 10:59:00
cve
cve
CVE-2015-1686
2015-05-13 10:59:17
mskb
mskb
openvas
openvas
Microsoft Windows JScript & VBScript Security Bypass Vulnerability (3057263)
2015-05-13 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (3049563)
2015-05-13 00:00:00
nessus
nessus
kaspersky
kaspersky
KLA10580 Multiple vulnerabilities in Microsoft products
2015-05-12 00:00:00
KLA10579 Multiple vulnerabilities in Microsoft Internet Explorer
2015-05-12 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-05-13 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.771
Percentile
98.2%
Related for NVD:CVE-2015-1686