CVE-2014-0818

CVE-2014-0818 : In Autodesk AutoCAD (pre-2014), an insecure FAS file search path allows a Trojan horse FAS to be loaded, enabling a local user to gain privileges and execute arbitrary VBScript code. Affected products are AutoCAD 2013 and earlier. Root cause: improper handling of the FAS file sear...

CVE-2014-0818

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

CVE-2014-0818: Improper Control of Generation of Code

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

PT-2014-3864

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions prior to 2014 Description The issue allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path. Recommendations For versions prior to 2014, update...

JVN#33382534: AutoCAD vulnerable to arbitrary VBScript execution

AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD loads specific FAS files when opening files. AutoCAD contains an issue with the FAS file search path, which may lead to arbitrary VBScript code execution. Impact Arbitrary VBScript code may be executed wi...

Microsoft VBScript 远程代码执行漏洞(CVE-2014-0271)(MS14-010)

BUGTRAQ ID: 65395 CVECAN ID: CVE-2014-0271 Internet Explorer是微软公司推出的一款网页浏览器。 VBScript引擎除了内存对象时存在远程代码执行漏洞。该漏洞可破坏内存，使攻击者可以在当前用户上下文中执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS14-010）以及相应补丁:...

CVE-2014-0271

The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

Memory corruption

The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

CVE-2014-0271

The CVE-2014-0271 entry maps to a memory-corruption vulnerability in the VBScript engine used by Microsoft Internet Explorer (IE) 6–11 and VBScript 5.6–5.8. The root cause is memory handling flaws in VBScript that can be triggered by a crafted web site, enabling remote code execution or memory co...

CVE-2014-0271

The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

CVE-2014-0271: Improper Restriction of Operations within the Bounds of a Memory Buffer

The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

MS14-011: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (2928390)

The installed version of the VBScript Scripting Engine has a memory corruption vulnerability due to improper handling of objects in memory. If an attacker can trick a user on the system into viewing or opening malicious content, this issue could be leveraged to execute arbitrary code on the...

Microsoft Internet Explorer Multiple Vulnerabilities (2909921)

This host is missing a critical security update according to Microsoft Bulletin MS14-010. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft VBScript Remote Code Execution Vulnerability (2928390)

This host is missing a critical security update according to Microsoft Bulletin MS14-011. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS14-011: Description of the security update for Visual Basic Scripting Edition (VBScript) 5.7: February 11, 2014

None None...

PT-2014-1059

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 6 through 11 VBScript versions 5.6 through 5.8 Description The issue is related to the handling of objects in memory by the VBScript engine, allowing remote attackers to execute arbitrary code or cause memory...

MS14-011: Description of the security update for Visual Basic Scripting Edition (VBScript) 5.8: February 11, 2014

Addresses a vulnerability by changing how the VBScript scripting engine handles objects in memory.INTRODUCTIONMicrosoft has released security bulletin MS14-011. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft Windows multiple security vulnerabilities

XML services information leakage, IPv6 DoS, Direct2D memory corruption, .Net privilege escalation, VBScript code execution...

Microsoft VBScript CVE-2014-0271 Remote Code Execution Vulnerability

Description Microsoft VBScript is prone to a remote code-execution vulnerability. Attackers can leverage this issue by enticing unsuspecting users to view a malicious webpage. Successful exploits would allow arbitrary code to run with the privileges of the currently logged-in user. Technologies...

Update (2/10) - Advance Notification Service for February 2014 Security Bulletin Release

Update as of February 10, 2014 We are adding two updates to the February release. There will be Critical-rated updates for Internet Explorer and VBScript in addition to the previously announced updates scheduled for release on February 11, 2014. These updates have completed testing and will be...