Lucene search
MicrosoftCVE-2015-1684HistoryMay 13, 2015 - 10:59 a.m.
CVE-2015-1684
2015-05-1310:59:15
CWE-200
microsoft
web.nvd.nist.gov
47
cve-2015-1684
vbscript.dll
aslr bypass
internet explorer
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.834
Percentile
98.5%
VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka “VBScript ASLR Bypass.”
Affected configurations
Node
microsoftvbscriptMatch5.6
ORmicrosoftvbscriptMatch5.7
ORmicrosoftvbscriptMatch5.8
Node
microsoftinternet_explorerMatch8
ORmicrosoftinternet_explorerMatch9
ORmicrosoftinternet_explorerMatch10
ORmicrosoftinternet_explorerMatch11-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | vbscript | 5.6 | cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:* |
| microsoft | vbscript | 5.7 | cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:* |
| microsoft | vbscript | 5.8 | cpe:2.3:a:microsoft:vbscript:5.8:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 8 | cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 9 | cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 10 | cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 11 | cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:* |
Related
zdi
zdi
nvd
nvd
CVE-2015-1684
2015-05-13 10:59:15
prion
prion
Security feature bypass
2015-05-13 10:59:00
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2015-1684
2015-05-13 10:00:00
symantec
symantec
Microsoft VBScript CVE-2015-1684 ASLR Security Bypass Vulnerability
2015-05-12 00:00:00
openvas
openvas
Microsoft Windows JScript & VBScript Security Bypass Vulnerability (3057263)
2015-05-13 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (3049563)
2015-05-13 00:00:00
mskb
mskb
nessus
nessus
kaspersky
kaspersky
KLA10580 Multiple vulnerabilities in Microsoft products
2015-05-12 00:00:00
KLA10579 Multiple vulnerabilities in Microsoft Internet Explorer
2015-05-12 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-05-13 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.834
Percentile
98.5%
Related for CVE-2015-1684