CVE-2015-6055

Sažetak

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Filter arguments, aka "Scripting Engine Memory Corruption Vulnerability."

Reference

http://www.securityfocus.com/bid/77010
http://www.securitytracker.com/id/1033800
http://www.zerodayinitiative.com/advisories/ZDI-15-521
http://www.zerodayinitiative.com/advisories/ZDI-15-537
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-108

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

12-10-2018 - 22:10

Objavljeno

14-10-2015 - 01:59