CVE-2015-2372
HighSummary
The vulnerability in vbscript.dll in Microsoft VBScript 5.6 through 5.8, used with Internet Explorer 6 through 11, allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or disruption of their operation.
Recommendation
It is recommended to update to the latest version of Microsoft VBScript and implement appropriate security measures in web browsers.
Other vulnerabilities in vbscript.dll
See all- CVE-2015-0032High
The vulnerability in vbscript.dll in Microsoft VBScript 5.6 through 5.8, used with Internet Explorer 8 through 11, allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
- CVE-2014-6363High
The vulnerability in vbscript.dll in Microsoft VBScript 5.6 through 5.8, used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
Original NVD description (English source)
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."