Code execution vulnerability in Microsoft JScript and VBScript engines

Описание

An improper objects handling was found in Microsoft JScript and VBScript. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content.

---

Technical details

To mitigate this vulnerability you can restrict access to VBScript.dll and JScript.dll. More detailed information about this workaround you can find at original advisory MS16-086

Первичный источник обнаружения

• CVE-2016-3204
  

Связанные продукты

• Microsoft-VBScript-engine

Список CVE

• CVE-2016-3204
  critical

Список KB

• 3169996
• 3169658
• 3169659

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com