KLA10843
Code execution vulnerability in Microsoft JScript and VBScript engines
Обновлено: 17/06/2019
Дата обнаружения
12/07/2016
Уровень угрозы
High
Описание

An improper objects handling was found in Microsoft JScript and VBScript. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content.


Technical details

To mitigate this vulnerability you can restrict access to VBScript.dll and JScript.dll. More detailed information about this workaround you can find at original advisory MS16-086

Пораженные продукты

Microsoft VBScript engine 5.7 and 5.8
Microsoft JScript 5.8

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2016-3204
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

SUI 
[?]
Связанные продукты
Microsoft VBScript engine
CVE-IDS
CVE-2016-32049.3Critical
Microsoft official advisories
Microsoft Security Update Guide
KB list

3169996
3169658
3169659