CVE-2015-6055

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted Filter arguments, aka "Scripting Engine Memory Corrupti...

CVE-2015-2482

CVE-2015-2482 affects Microsoft VBScript/JScript engines (VBScript 5.7/5.8 and JScript 5.7/5.8) used in Internet Explorer 8–11 and related products. A crafted replace operation on a JavaScript RegExp can trigger memory corruption, enabling remote code execution or a denial of service. Connected s...

CVE-2015-6059

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

CVE-2015-6055: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted Filter arguments, aka "Scripting Engine Memory Corrupti...

CVE-2015-6056: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 JScript and 2 VBScript engines in Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

Microsoft Windows JScript and VBScript Remote Code Execution Vulnerability (3089659)

This host is missing a critical security update according to Microsoft Bulletin MS15-108. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-6059: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

CVE-2015-6052: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass."...

CVE-2015-2482: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted replace operation with a JavaScript regular expressio...

PT-2015-2986

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11 VBScript versions 5.7 and 5.8 JScript versions 5.7 and 5.8 Description The issue is related to the improper disclosure of memory contents by the JScript or VBScript engines, potentially allowing remote...

PT-2015-7124

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11 VBScript versions 5.7 and 5.8 JScript versions 5.7 and 5.8 Description A remote code execution issue exists due to the way VBScript and JScript engines handle objects in memory. This could allow an...

Microsoft VBScript and JScript CVE-2015-6055 Multiple Remote Memory Corruption Vulnerabilities

Description Microsoft VBScript and JScript are prone to multiple remote memory-corruption vulnerabilities. Attackers can exploit these issues by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit these issues to execute arbitrary code in the context of the...

PT-2015-7125

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description A remote code execution issue exists in the way the VBScript and JScript engines handle objects in memory, allowing attackers to execute arbitrary code or cause a denial of service...

KLA10676 Multiple vulnerabilities in Microsoft JScript and VBScript

Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improperly handling objects...

Microsoft VBScript and JScript ASLR Bypass (MS15-106: CVE-2015-6052)

A security feature bypass vulnerability has been discovered in JScript and VBScript scripting engines. The vulnerability is due to the way that the VBScript scripting engine uses the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a...

MS15-108: Security update for JScript and VBScript to address remote code execution: October 13, 2015

Resolves vulnerabilities in the VBScript and JScript scripting engines in Windows that could allow remote code execution.SummaryThis security update resolves vulnerabilities in the VBScript and JScript scripting engines in Windows. The more severe of these vulnerabilities could allow remote code...

MS15-108: Security Update for JScript and VBScript to Address Remote Code Execution (3089659)

The VBScript and JScript engines on the remote host are affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in the VBScript and JScript engines due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincin...

PT-2015-5776

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11 VBScript versions 5.7 and 5.8 JScript versions 5.7 and 5.8 Description A remote code execution issue exists due to a memory corruption flaw in the VBScript and JScript engines. This allows attackers to...

PT-2015-2985

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11 VBScript versions 5.7 and 5.8 JScript versions 5.7 and 5.8 Description The issue is related to the VBScript and JScript engines, which allow remote attackers to bypass the Address Space Layout...

Microsoft VBScript and JScript CVE-2015-2482 Remote Memory Corruption Vulnerability

Description Microsoft VBScript and JScript are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...