CVE-2011-0663 Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka....
HighCVSS 9.3
EPSS 26.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft jscript | = 5.6 | No fix listed |
| Microsoft jscript | = 5.7 | No fix listed |
| Microsoft jscript | = 5.8 | No fix listed |
| Microsoft vbscript | = 5.6 | No fix listed |
| Microsoft vbscript | = 5.7 | No fix listed |
| Microsoft vbscript | = 5.8 | No fix listed |
References
- 71774 vdb-entry
- 44162 third-party-advisory
- 47249 vdb-entry
- 1025333 vdb-entry
- TA11-102A third-party-advisory us-government-resource
- ADV-2011-0949 vdb-entry
- MS11-031 vendor-advisory
- oval:org.mitre.oval:def:12673 signature vdb-entry