Lucene search

[email protected]NVD:CVE-2011-0663

HistoryApr 13, 2011 - 6:55 p.m.

CVE-2011-0663

2011-04-1318:55:01

CWE-189

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.829

Percentile

98.5%

JSON

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka “Scripting Memory Reallocation Vulnerability.”

Affected configurations

Nvd

Node

microsoftjscriptMatch5.6

microsoftvbscriptMatch5.6

AND

microsoftwindows_2003_serversp2

microsoftwindows_server_2003sp2

microsoftwindows_xpMatch-sp2x64

Node

microsoftjscriptMatch5.7

microsoftvbscriptMatch5.7

AND

microsoftwindows_2003_serversp2

microsoftwindows_server_2003sp2

microsoftwindows_server_2008itanium

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008Match-sp2itanium

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

Node

microsoftjscriptMatch5.8

microsoftvbscriptMatch5.8

AND

microsoftwindows_2003_serversp2

microsoftwindows_7Match-

microsoftwindows_7Match-sp1x64

microsoftwindows_7Match-sp1x86

microsoftwindows_server_2003sp2

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008Matchr2itanium

microsoftwindows_server_2008Matchr2x64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

VendorProductVersionCPE
microsoftjscript5.6cpe:2.3:a:microsoft:jscript:5.6:*:*:*:*:*:*:*
microsoftvbscript5.6cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
microsoftjscript5.7cpe:2.3:a:microsoft:jscript:5.7:*:*:*:*:*:*:*
microsoftvbscript5.7cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	jscript	5.6	cpe:2.3:a:microsoft:jscript:5.6:::::::*
microsoft	vbscript	5.6	cpe:2.3:a:microsoft:vbscript:5.6:::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::*
microsoft	jscript	5.7	cpe:2.3:a:microsoft:jscript:5.7:::::::*
microsoft	vbscript	5.7	cpe:2.3:a:microsoft:vbscript:5.7:::::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008:::itanium:::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008:::x32:::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008:::x64:::::*