CVE-2016-0002

CWE-119 — Buffer Overflow6 documents6 sources
Severity
7.5HIGH
EPSS
47.2%
top 2.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft JscriptMicrosoft Vbscript
Timeline
PublishedJan 13
Latest updateMay 14

Description

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶NVDmicrosoft/jscript5.7, 5.8+1
▶NVDmicrosoft/vbscript5.7, 5.8+1

🔴Vulnerability Details

3
GHSA
GHSA-2mwm-2v2m-5w53: The Microsoft (1) VBScript 5↗2022-05-14
▶
Kernel
mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]↗2016-11-24
▶
CVEList
CVE-2016-0002: The Microsoft (1) VBScript 5↗2016-01-13
▶

📋Vendor Advisories

1
Microsoft
Scripting Engine Memory Corruption Vulnerability↗2016-01-12
▶

💬Community

1
Bugzilla
CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)↗2017-10-09
▶
CVE-2016-0002 (HIGH CVSS 7.5) | The Microsoft (1) VBScript 5.7 and | cvebase.io