KLA10739 Code execution vulnerability in Microsoft VBScript

Improper memory objects handling was found in Microsoft VBScript. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content.

Technical details

To mitigate this vulnerability you can restrict access to VBScript.dll

Original advisories

CVE-2016-0002

Related products

Microsoft-VBScript-engine

CVE list

CVE-2016-0002 critical

KB list

3124266

3124263

3124275

3125540

3124624

3124625

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Microsoft VBScript versions 5.7 and 5.8