CVE-2008-0083 The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script,....
HighCVSS 9.3
EPSS 30.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- SSRT080048 vendor-advisory
- 29712 third-party-advisory vendor-advisory
- 28551 patch vdb-entry
- 1019799 vdb-entry
- TA08-099A third-party-advisory us-government-resource
- ADV-2008-1146 vdb-entry vendor-advisory
- MS08-022 vendor-advisory
- oval:org.mitre.oval:def:5495 signature vdb-entry