CVE-2011-0663

Description

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka Scripting Memory Reallocation Vulnerability.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
27.859

Associated Vulnerability

VulnerabilityOS Platform
Security Update for Windows XP (KB2510581)Windows
Security Update for Windows XP (KB2510531)Windows
Security Update for Windows Server 2003 (KB2510587)Windows
Security Update for Windows Server 2003 (KB2510581)Windows
Security Update for Windows Server 2003 (KB2510531)Windows
Security Update for Windows Vista (KB2510581) x86 based systemsWindows
Security Update for Windows Vista (KB2510581) x86 based systems for SP2Windows
Security Update for Windows Vista (KB2510531) x86 based systemsWindows
Security Update for Windows Vista (KB2510531) x86 based systems for SP2Windows
Security Update for Windows Server 2008 (KB2510581) x86 based systemsWindows
Security Update for Windows Server 2008 (KB2510581) x86 based systems for SP2Windows
Security Update for Windows Server 2008 (KB2510531)Windows
Security Update for Windows 7 (KB2510531) x86 based systemsWindows
Security Update for Windows 7 (KB2510531) x86 based systems for SP1Windows
Security Update for Windows XP x64 Edition (KB2510587)Windows
Security Update for Windows XP x64 Edition (KB2510581)Windows
Security Update for Windows XP x64 Edition (KB2510531)Windows
Security Update for Windows Server 2003 x64 Edition (KB2510587)Windows
Security Update for Windows Server 2003 x64 Edition (KB2510581)Windows
Security Update for Windows Server 2003 x64 Edition (KB2510531)Windows
Security Update for Windows Vista for x64-based Systems (KB2510581)Windows
Security Update for Windows Vista for x64-based Systems (KB2510581) for SP2Windows
Security Update for Windows Vista for x64-based Systems (KB2510531)Windows
Security Update for Windows Vista for x64-based Systems (KB2510531) for SP2Windows
Security Update for Windows Server 2008 x64 Edition (KB2510581)Windows
Security Update for Windows Server 2008 x64 Edition (KB2510581) for SP2Windows
Security Update for Windows Server 2008 x64 Edition (KB2510531)Windows
Security Update for Windows Server 2008 x64 Edition (KB2510531)Windows
Security Update for Windows 7 for x64-based Systems (KB2510531)Windows
Security Update for Windows 7 for x64-based Systems (KB2510531) for SP1Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2510531)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2510531) for SP1Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-10178Security Update for Windows Server 2003 (KB2510587)
PATCH-10179Security Update for Windows Server 2003 (KB2510581)
PATCH-10182Security Update for Windows Vista (KB2510581)
PATCH-10185Security Update for Windows Server 2008 (KB2510581)
PATCH-10186Security Update for Windows Server 2008 (KB2510581)
PATCH-10187Security Update for Windows Server 2008 (KB2510531)
PATCH-10188Security Update for Windows 7 (KB2510531)
PATCH-10189Security Update for Windows 7 (KB2510531)
PATCH-10192Security Update for Windows XP x64 Edition (KB2510531)
PATCH-10193Security Update for Windows Server 2003 x64 Edition (KB2510587)
PATCH-10194Security Update for Windows Server 2003 x64 Edition (KB2510581)
PATCH-10195Security Update for Windows Server 2003 x64 Edition (KB2510531)
PATCH-10196Security Update for Windows Vista for x64-based Systems (KB2510581)
PATCH-10197Security Update for Windows Vista for x64-based Systems (KB2510581)
PATCH-10198Security Update for Windows Vista for x64-based Systems (KB2510531)
PATCH-10199Security Update for Windows Vista for x64-based Systems (KB2510531)
PATCH-10200Security Update for Windows Server 2008 x64 Edition (KB2510581)
PATCH-10202Security Update for Windows Server 2008 x64 Edition (KB2510531)
PATCH-10204Security Update for Windows 7 for x64-based Systems (KB2510531)
PATCH-10205Security Update for Windows 7 for x64-based Systems (KB2510531)
PATCH-10206Security Update for Windows Server 2008 R2 x64 Edition (KB2510531)
PATCH-10207Security Update for Windows Server 2008 R2 x64 Edition (KB2510531)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234