PT-2016-3361 · Microsoft · Vbscript Engine +3

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11 JScript engine version 5.8 VBScript engine versions 5.7 and 5.8 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

Internet Explorer 11 VBScript Engine Memory Corruption

This module exploits the memory corruption vulnerability CVE-2016-0189 present in the VBScript engine of Internet Explorer 11. Module Options msf use exploit/windows/browser/ms16/051vbscript msf undefined051vbscript show actions ...actions... msf undefined051vbscript set ACTION msf...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2015-06661)

Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of Internet Explorer 9-11 and other products, VBScript and JScript engines. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service memory...

CVE-2015-2493: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2015-1684: Exposure of Sensitive Information to an Unauthorized Actor

VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript ASLR Bypass."...

Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-0032)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the VBScript engine handles objects in memory when rendered in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafte...

MS15-019: Vulnerability in VBScript Scripting Engine could allow remote code execution: March 10, 2015

Resolves a vulnerability in the VBScript scripting engine in Windows that could allow remote code execution if a user visits a specially crafted website.SummaryThis security update resolves a vulnerability in the VBScript scripting engine in Microsoft Windows. The vulnerability could allow remote...

KLA10471 Multiple vulnerabilities in VBScript engine

An unspecified vulnerability was found in VBScript engine. By exploiting this vulnerability malicious users execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories Microsoft advisory CVE-2015-0032...

KLA10605 Code execution vulnerability in Microsoft VBScript

An unspecified vulnerabilities were found in Microsoft VBScript engine. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2014-6363 CVE-2014-0271 Exploitation...

Microsoft Internet Explorer Multiple Vulnerabilities (2909921)

This host is missing a critical security update according to Microsoft Bulletin MS14-010. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...