CVE-2015-1684 VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection mechanism via a craft...
MediumCVSS 4.3
EPSS 16.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "VBScript ASLR Bypass."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft vbscript | = 5.6 | No fix listed |
| Microsoft vbscript | = 5.7 | No fix listed |
| Microsoft vbscript | = 5.8 | No fix listed |
| Microsoft internet explorer | = 8 | No fix listed |
| Microsoft internet explorer | = 9 | No fix listed |
| Microsoft internet explorer | = 10 | No fix listed |
| Microsoft internet explorer | = 11 | No fix listed |