CVE-2015-6052: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript and JScript ASLR Bypass."...

KLA10676 Multiple vulnerabilities in Microsoft JScript and VBScript

Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improperly handling objects...

Microsoft VBScript and JScript ASLR Bypass (MS15-106: CVE-2015-6052)

A security feature bypass vulnerability has been discovered in JScript and VBScript scripting engines. The vulnerability is due to the way that the VBScript scripting engine uses the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a...

MS15-108: Security update for JScript and VBScript to address remote code execution: October 13, 2015

Resolves vulnerabilities in the VBScript and JScript scripting engines in Windows that could allow remote code execution.SummaryThis security update resolves vulnerabilities in the VBScript and JScript scripting engines in Windows. The more severe of these vulnerabilities could allow remote code...

Microsoft Windows JScript ArrayBuffer.slice Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of arbitrary memory locations on applications using the JScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit...

Microsoft VBScript and JScript CVE-2015-6055 Multiple Remote Memory Corruption Vulnerabilities

Description Microsoft VBScript and JScript are prone to multiple remote memory-corruption vulnerabilities. Attackers can exploit these issues by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit these issues to execute arbitrary code in the context of the...

MS15-108: Security Update for JScript and VBScript to Address Remote Code Execution (3089659)

The VBScript and JScript engines on the remote host are affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in the VBScript and JScript engines due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincin...

Microsoft VBScript and JScript CVE-2015-2482 Remote Memory Corruption Vulnerability

Description Microsoft VBScript and JScript are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...

Microsoft VBScript and JScript CVE-2015-6052 ASLR Security Bypass Vulnerability

Description Microsoft VBScript and JScript are prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Microsoft Internet Explorer...

Microsoft VBScript and JScript CVE-2015-6059 Information Disclosure Vulnerability

Description Microsoft VBScript and JScript are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in further...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability in VBScript and JScript implementations of the Internet Explorer browser is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially crafted web page...

CVE-2015-2493

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

Memory corruption

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2015-2493

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2015-2493

CVE-2015-2493 affects Microsoft Internet Explorer (IE) engines VBScript and JScript in IE 8 (and IE 7–11 per related advisories). The vulnerability is a memory corruption flaw that can be exploited by a crafted web page to cause remote code execution or, per some sources, memory corruption leadin...

CVE-2015-2493: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the JScript 9 component in the Internet Explorer browser is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

VulnCheck KEV: CVE-2015-2419

JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service memory corruption via a crafted web site...

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."...

CVE-2015-2419

CVE-2015-2419 is a JScript 9 vulnerability in Microsoft Internet Explorer (IE10/IE11) that allows remote code execution and memory corruption when processing crafted JSON with JSON.stringify. The CVE is exploited via malicious web content and has been leveraged by loaders in exploit kits (notably...