CVE-2015-0032

Description

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka VBScript Memory Corruption Vulnerability.

Risk Information

Base Score

6.8

MODERATE

Vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

18.901

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows Server 2003 (KB3030403)	Windows
Security Update for Windows Server 2003 x64 Edition (KB3030403)	Windows
Security Update for Windows Server 2003 (KB3030398)	Windows
Security Update for Windows Vista (KB3030398)	Windows
Security Update for Windows Server 2008 (KB3030398)	Windows
Security Update for Windows Server 2003 x64 Edition (KB3030398)	Windows
Security Update for Windows Vista for x64-based Systems (KB3030398)	Windows
Security Update for Windows Server 2008 x64 Edition (KB3030398)	Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB3030630)	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-17122	Security Update for Windows Server 2003 (KB3030403)
PATCH-17123	Security Update for Windows Server 2003 x64 Edition (KB3030403)
PATCH-17124	Security Update for Windows Server 2003 (KB3030398)
PATCH-17125	Security Update for Windows Vista (KB3030398)
PATCH-17126	Security Update for Windows Server 2008 (KB3030398)
PATCH-17127	Security Update for Windows Server 2003 x64 Edition (KB3030398)
PATCH-17128	Security Update for Windows Vista for x64-based Systems (KB3030398)
PATCH-17129	Security Update for Windows Server 2008 x64 Edition (KB3030398)
PATCH-17130	Security Update for Windows Server 2008 R2 x64 Edition (KB3030630)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234