CVE-2019-0665 — Out-of-bounds Write in Microsoft Windows

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
7.5HIGHNVD
EPSS
7.2%
top 8.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Microsoft Internet Explorer 10Microsoft Internet Explorer 11Microsoft Windows+2 more
Timeline
PublishedApr 8
Latest updateMay 13

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0666, CVE-2019-0667, CVE-2019-0772.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages5 packages

▶CVEListV5microsoft/windows15 versions+14
▶CVEListV5microsoft/windows_server2008 R2 for Itanium-Based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1 (Core installation)+2
▶CVEListV5microsoft/internet_explorer_10Windows Server 2012
▶CVEListV5microsoft/internet_explorer_1124 versions+23

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wxq6-gr33-gq85: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code E↗2022-05-13
▶
CVEList
CVE-2019-0665: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code E↗2019-04-08
▶

📋Vendor Advisories

1
Microsoft
Windows VBScript Engine Remote Code Execution Vulnerability↗2019-03-12
▶
CVE-2019-0665 — Out-of-bounds Write in Microsoft | cvebase