CVE-2016-0002
HighSummary
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products have a vulnerability that allows remote attackers to execute arbitrary code via a crafted website.
Risk Assessment
This vulnerability could lead to remote code execution, posing a significant security threat to organizational systems.
Recommendation
It is recommended to update to the latest software versions and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in VBScript 5.7, VBScript 5.8, JScript 5.7, JScript 5.8, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, Internet Explorer 11
See all- CVE-2015-6136High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products allow remote attackers to execute arbitrary code via a crafted website.
- CVE-2015-6055High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other products allow remote attackers to execute arbitrary code or cause a denial of service via crafted Filter arguments, leading to memory corruption.
- CVE-2015-2482High
The VBScript 5.7 and 5.8 and JScript 5.7 and 5.8 engines in Internet Explorer 8 through 11 and other Microsoft products allow remote attackers to execute arbitrary code or cause a denial of service via a crafted replace operation with a JavaScript regular expression.
Original NVD description (English source)
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."