PT-2024-7809 · Microsoft · Windows+3

Garrett Moore + 1 · Published 2024-10-08 · Updated 2024-10-16 · CVE-2024-43584

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Scripting Engine (affected versions not specified)

Description A security feature bypass issue exists in the Windows Scripting Engine, allowing attackers to bypass security restrictions. The vulnerability is related to the jscript9legacy.dll library and the Antimalware Scan Interface (AMSI) in Microsoft Windows operating systems, which can lead to a violation of the data protection mechanism.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2024-09309

CVE-2024-43584

Affected Products

Antimalware Scan Interface

Windows

Windows Scripting Engine

Jscript9Legacy.Dll

References · 10

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43584 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09309 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43584 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43584 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43584 · Vendor Advisory
• https://t.me/cvenotify/98398 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1843949141237383402 · Twitter Post
• https://learn.microsoft.com/ru-ru/windows/win32/amsi/antimalware-scan-interface-portal · Note
• https://twitter.com/CVEnew/status/1843710885212070071 · Twitter Post