CVE-2015-2482
HighSummary
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products allow remote attackers to execute arbitrary code or cause a denial of service via a crafted replace operation with a JavaScript regular expression.
Risk Assessment
This vulnerability could lead to serious consequences, including system takeover or disruption, posing a security threat to the organization.
Recommendation
It is recommended to update to the latest version of the software and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in VBScript 5.7, VBScript 5.8, JScript 5.7, JScript 5.8, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, Internet Explorer 11
See all- CVE-2016-0002High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products have a vulnerability that allows remote attackers to execute arbitrary code via a crafted website.
- CVE-2015-6136High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products allow remote attackers to execute arbitrary code via a crafted website.
- CVE-2015-6055High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other products allow remote attackers to execute arbitrary code or cause a denial of service via crafted Filter arguments, leading to memory corruption.
Original NVD description (English source)
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a JavaScript regular expression, aka "Scripting Engine Memory Corruption Vulnerability."