Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-2372
HistoryJul 14, 2015 - 9:59 p.m.

CVE-2015-2372

2015-07-1421:59:07
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.415 Medium

EPSS

Percentile

97.3%

JSON

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “VBScript Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftvbscriptMatch5.6
OR
microsoftvbscriptMatch5.7
OR
microsoftvbscriptMatch5.8
AND
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7
OR
microsoftinternet_explorerMatch8
OR
microsoftinternet_explorerMatch9
OR
microsoftinternet_explorerMatch10
OR
microsoftinternet_explorerMatch11-

Related

cve 1
kaspersky 2
symantec 1
openvas 2
mskb 2
nessus 2
checkpoint_advisories 1
prion 1
cvelist 1
securityvulns 1
cve
cve
CVE-2015-2372
2015-07-14 21:59:07
kaspersky
kaspersky
KLA10633 code execution vulnerability in Microsoft VBScript
2015-07-14 00:00:00
KLA10634 Multiple vulnerabilities in Microsoft Internet Explorer
2015-07-14 00:00:00
symantec
symantec
Microsoft VBScript CVE-2015-2372 Remote Code Execution Vulnerability
2015-07-14 00:00:00
openvas
openvas
Microsoft Windows VBScript Remote Code Execution Vulnerability (3072604)
2015-07-15 00:00:00
Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)
2015-07-15 00:00:00
mskb
mskb
MS15-066: Vulnerability in VBScript could allow remote code execution: July 14, 2015
2015-07-14 00:00:00
MS15-065: Security update for Internet Explorer: July 14, 2015
2015-07-14 00:00:00
nessus
nessus
MS15-066: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3072604)
2015-07-14 00:00:00
MS15-065: Cumulative Security Update for Internet Explorer (3076321)
2015-07-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2372)
2015-07-14 00:00:00
prion
prion
Memory corruption
2015-07-14 21:59:00
cvelist
cvelist
CVE-2015-2372
2015-07-14 21:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-07-19 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.415 Medium

EPSS

Percentile

97.3%

JSON
Related for NVD:CVE-2015-2372
cve1kaspersky2symantec1openvas2mskb2nessus2checkpoint_advisories1prion1cvelist1securityvulns1