Lucene search

K
nvd[email protected]NVD:CVE-2015-6055
HistoryOct 14, 2015 - 1:59 a.m.

CVE-2015-6055

2015-10-1401:59:25
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.436 Medium

EPSS

Percentile

97.4%

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Filter arguments, aka “Scripting Engine Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftjscriptMatch5.6
OR
microsoftjscriptMatch5.7
OR
microsoftjscriptMatch5.8
OR
microsoftvbscriptMatch5.6
OR
microsoftvbscriptMatch5.7
OR
microsoftvbscriptMatch5.8
AND
microsoftinternet_explorerMatch8
OR
microsoftinternet_explorerMatch9
OR
microsoftinternet_explorerMatch10
OR
microsoftinternet_explorerMatch11-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.436 Medium

EPSS

Percentile

97.4%