PT-2015-5776 · Microsoft · Vbscript+2

Skylined · Publicado 2015-10-13 · Atualizado 2018-10-12 · CVE-2015-2482

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11 VBScript versions 5.7 and 5.8 JScript versions 5.7 and 5.8

Description A remote code execution issue exists due to a memory corruption flaw in the VBScript and JScript engines. This allows attackers to execute arbitrary code or cause a denial of service via a crafted replace operation with a JavaScript regular expression. An attacker who successfully exploits this issue could gain the same user rights as the current user, potentially taking control of an affected system if the user has administrative rights.

Recommendations For Internet Explorer versions 8 through 11, update to a version that includes the fix for this issue. For VBScript versions 5.7 and 5.8, consider disabling the scripting engine until a patch is available. For JScript versions 5.7 and 5.8, restrict the use of JavaScript regular expressions in replace operations to minimize the risk of exploitation.

Exploit

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-2482

ZDI-15-515

Produtos afetados

Internet Explorer

Jscript

Vbscript

Referências · 10

• 🔥 https://exploit-db.com/exploits/40798 · Exploit
• http://securitytracker.com/id/1033800 · Nota
• http://seclists.org/fulldisclosure/2015/Oct/54 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2482 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-108 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2482 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-15-515 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-515 · Nota
• http://technet.microsoft.com/security/bulletin/ms15-106 · Nota