CVE-2020-1060

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka VBScript Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.

Risk Information

Base Score
6.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
5.133

Associated Vulnerability

VulnerabilityOS Platform
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4556807)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4556807)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4551853)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4551853)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2019 for x64-based Systems (KB4551853)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2008 for x64-based Systems (KB4556860) (ESU)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2008 for x86-based Systems (KB4556860) (ESU)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 8.1 for x86-based Systems (KB4556846)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4556846)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 8.1 for x64-based Systems (KB4556846)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server, version 1909 for x64-based Systems (KB4556799)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1903 for x64-based Systems (KB4556799)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB4556799)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1903 for x86-based Systems (KB4556799)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB4556799)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server, version 1903 for x64-based Systems (KB4556799)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2016 for x64-based Systems (KB4556813)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4556813)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4556813)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4556826)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4556826)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x64-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x86-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 for x64-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4556798)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4556812)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4556812)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4556836) (ESU)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 7 for x86-based Systems (KB4556836) (ESU)Windows
Internet Explorer Memory Corruption Vulnerability for Windows 7 for x64-based Systems (KB4556836) (ESU)Windows
Internet Explorer Memory Corruption Vulnerability for Windows Server 2012 for x64-based Systems (KB4556840)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-288552020-05 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4556807)
PATCH-288562020-05 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4556807)
PATCH-288572020-05 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4551853)
PATCH-288582020-05 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4551853)
PATCH-288592020-05 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4551853)
PATCH-288892020-05 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4556860) (ESU)
PATCH-288902020-05 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4556860) (ESU)
PATCH-288822020-05 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4556846)
PATCH-288832020-05 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4556846)
PATCH-288842020-05 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4556846)
PATCH-288602020-05 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4556799)
PATCH-288612020-05 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4556799)
PATCH-288622020-05 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4556799)
PATCH-288632020-05 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4556799)
PATCH-288642020-05 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4556799)
PATCH-288652020-05 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4556799)
PATCH-288702020-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4556813)
PATCH-288712020-05 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4556813)
PATCH-288722020-05 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4556813)
PATCH-288682020-05 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4556826)
PATCH-288692020-05 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4556826)
PATCH-288732020-05 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4556798) (ESU)
PATCH-288742020-05 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4556798) (ESU)
PATCH-288752020-05 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based systems (KB4556798) (ESU)
PATCH-288762020-05 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x86-based systems (KB4556798) (ESU)
PATCH-288772020-05 Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4556798) (ESU)
PATCH-288782020-05 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 for x64-based systems (KB4556798)
PATCH-288792020-05 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4556798)
PATCH-288802020-05 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4556798)
PATCH-288812020-05 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4556798)
PATCH-288662020-05 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4556812)
PATCH-288672020-05 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4556812)
PATCH-288862020-05 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4556836) (ESU)
PATCH-288872020-05 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4556836) (ESU)
PATCH-288882020-05 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4556836) (ESU)
PATCH-288852020-05 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4556840)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234