Microsoft VBScript And JScript Scripting Engines Integer Overflow Code Execution Vulnerability

Description Microsoft VBScript and JScript scripting engines are prone to a remote code-execution vulnerability due to an integer-overflow error. Attackers can leverage this issue by enticing unsuspecting users to view a malicious webpage. Successful exploits would allow arbitrary code to run wit...

CVE-2011-0663

CVE-2011-0663 concerns multiple integer overflow vulnerabilities in Microsoft JScript 5.6–5.8 and VBScript 5.6–5.8 scripting engines. A crafted web page can trigger memory corruption, allowing remote attackers to execute arbitrary code on affected Windows systems. Affected components include JScr...

CVE-2011-0663

Multiple integer overflows in the Microsoft 1 JScript 5.6 through 5.8 and 2 VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."...

Microsoft JScript and VBScript Scripting Engines Remote Code Execution Vulnerability (2514666)

This host is missing a critical security update according to Microsoft Bulletin MS11-031. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2011-2540 · Microsoft · Jscript +1

Name of the Vulnerable Software and Affected Versions: Microsoft JScript versions 5.6 through 5.8 Microsoft VBScript versions 5.6 through 5.8 Description: The issue is related to multiple integer overflows in the scripting engines, which allow remote attackers to execute arbitrary code via a...

MS11-031: Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution (2514666)

The installed version of the JScript and VBScript scripting engines contains an integer overflow vulnerability that can occur when the scripting engines process a script in a web page and attempt to reallocate memory while decoding the script. If an attacker can trick a user on the affected syste...

MS11-031: Description of the security update for the JScript and VBScript v5.8 scripting engines: April 12, 2011

None None...

Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability (2475792)

This host is missing a critical security update according to Microsoft Bulletin MS11-009. OpenVAS Vulnerability Test $Id: secpodms11-009.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability 2475792 Authors: Madhuri D...

Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability (2475792)

This host is missing a critical security update according to Microsoft Bulletin MS11-009. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft VBScript和JScript脚本引擎远程溢出漏洞（MS08-022）

BUGTRAQ ID: 28551 CVECAN ID: CVE-2008-0083 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的VBScript和JScript脚本引擎在处理畸形数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Windows的VBScript和JScript脚本引擎在解码网页中的脚本时允许脚本加载到内存中运行，这可能导致缓冲区溢出。如果用户打开了特制文件或访问正在运行特制脚本的网站，则此漏洞可能允许远程执行代码。 Microsoft VBScript/JScript 5.1 - Microsoft Windows 2000...

CVE-2008-0083

The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0083

The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...

Microsoft Windows Scripting Engines Script Encoding Code Execution (MS08-022; CVE-2008-0083)

VBScript stands for Microsoft Visual Basic Scripting Edition that includes Web client scripting in Microsoft Internet Explorer and Web server scripting in Microsoft Internet Information Service. JScript is the Microsoft implementation of the ECMA 262 language specification ECMAScript Edition 3. T...