CVE-2015-6055
HighSummary
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other products allow remote attackers to execute arbitrary code or cause a denial of service via crafted Filter arguments, leading to memory corruption.
Risk Assessment
This vulnerability can lead to remote code execution, posing a serious security threat to organizational systems. Attackers may exploit this flaw to gain control over the system.
Recommendation
It is recommended to update to the latest versions of the VBScript and JScript engines and apply relevant security patches to minimize risk.
Other vulnerabilities in VBScript 5.7, VBScript 5.8, JScript 5.7, JScript 5.8, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, Internet Explorer 11
See all- CVE-2016-0002High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products have a vulnerability that allows remote attackers to execute arbitrary code via a crafted website.
- CVE-2015-6136High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products allow remote attackers to execute arbitrary code via a crafted website.
- CVE-2015-2482High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products allow remote attackers to execute arbitrary code or cause a denial of service via a crafted replace operation with a JavaScript regular expression.
Original NVD description (English source)
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Filter arguments, aka "Scripting Engine Memory Corruption Vulnerability."