VBScript and JScript ASLR Bypass in Microsoft Internet Explorer and Other Products
CVE-2015-6052

Currently unrated

Key Information:

Vendor
Microsoft
Status
Jscript
Vbscript
Internet Explorer
Vendor
CVE Published:
14 October 2015

Summary

The VBScript and JScript engines in various versions of Microsoft Internet Explorer and other products are susceptible to an ASLR bypass. This vulnerability allows remote attackers to exploit poorly protected memory allocations through specially crafted websites, potentially facilitating the execution of arbitrary code. It emphasizes the importance of keeping software updated and applying security patches to mitigate risks associated with this type of vulnerability.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.securitytracker.com/id/1033800
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

18% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.