CVE-2015-2372 vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memo...
HighCVSS 9.3
EPSS 20.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft vbscript | = 5.6 | No fix listed |
| Microsoft vbscript | = 5.7 | No fix listed |
| Microsoft vbscript | = 5.8 | No fix listed |