Home

CVE-2020-1403

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka VBScript Remote Code Execution Vulnerability.

Risk Information

Base Score
6.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
9.339

Associated Vulnerability

VulnerabilityOS Platform
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4558998)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4558998)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2019 for x64-based Systems (KB4558998)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4565508)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4565508)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4565489)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4565489)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4565524)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Windows 7 for x86-based Systems (KB4565524)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Windows 7 for x64-based Systems (KB4565524) (ESU)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4565511)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4565511)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4565511)Windows
VBScript Remote Code Execution Vulnerability for Windows 8.1 for x86-based Systems (KB4565541)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4565541)Windows
VBScript Remote Code Execution Vulnerability for Windows 8.1 for x64-based Systems (KB4565541)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4565513)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4565513)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1903 for x64-based Systems (KB4565483)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB4565483)Windows
VBScript Remote Code Execution Vulnerability for Windows Server, version 1903 for x64-based Systems (KB4565483)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1903 for x86-based Systems (KB4565483)Windows
VBScript Remote Code Execution Vulnerability for Windows Server, version 1909 for x64-based Systems (KB4565483)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB4565483)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows Server 2012 for x64-based systems (KB4565479)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4565479)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4565479)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows 7 for x64-based systems (KB4565479)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4565479)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4565479)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4565479)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4565479)Windows
VBScript Remote Code Execution Vulnerability for Internet Explorer 11 for Windows 7 for x86-based systems (KB4565479)(ESU)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2008 for x86-based Systems (KB4565536) (ESU)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2008 for x64-based Systems (KB4565536) (ESU)Windows
VBScript Remote Code Execution Vulnerability for Windows Server 2012 for x64-based Systems (KB4565537)Windows
VBScript Remote Code Execution Vulnerability for Windows Server, version 2004 for x64-based Systems (KB4565503)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 2004 for x86-based Systems (KB4565503)Windows
VBScript Remote Code Execution Vulnerability for Windows 10 Version 2004 for x64-based Systems (KB4565503)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-292382020-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4558998) (KB4569509) (CVE-2020-1350)
PATCH-292392020-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4558998,KB4569509) (CVE-2020-1350)
PATCH-292402020-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4558998,KB4569509) (CVE-2020-1350)
PATCH-292462020-07 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4565508)
PATCH-292472020-07 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4565508)
PATCH-292412020-07 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4565489)
PATCH-292422020-07 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4565489)
PATCH-292712020-07 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4565524,KB4569509) (CVE-2020-1350) (ESU)
PATCH-292722020-07 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4565524,KB4569509) (CVE-2020-1350) (ESU)
PATCH-292732020-07 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4565524,KB4569509) (CVE-2020-1350) (ESU)
PATCH-292542020-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4565511) (CVE-2020-1350)
PATCH-292552020-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4565511) (CVE-2020-1350)
PATCH-292562020-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4565511) (CVE-2020-1350)
PATCH-292682020-07 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4565541,KB4569509) (CVE-2020-1350)
PATCH-292692020-07 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4565541,KB4569509) (CVE-2020-1350)
PATCH-292702020-07 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4565541,KB4569509) (CVE-2020-1350)
PATCH-292572020-07 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4565513)
PATCH-292582020-07 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4565513)
PATCH-292482020-07 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350)
PATCH-292492020-07 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350)
PATCH-292502020-07 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350)
PATCH-292512020-07 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4565483,KB4569509) (CVE-2020-1350)
PATCH-292522020-07 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350)
PATCH-292532020-07 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4565483,KB4569509) (CVE-2020-1350)
PATCH-292592020-07 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 for x64-based systems (KB4565479)
PATCH-292602020-07 Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4565479)(ESU)
PATCH-292612020-07 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4565479)(ESU)
PATCH-292622020-07 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based systems (KB4565479)(ESU)
PATCH-292632020-07 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4565479)
PATCH-292642020-07 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4565479)(ESU)
PATCH-292652020-07 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4565479)
PATCH-292662020-07 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4565479)
PATCH-292672020-07 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x86-based systems (KB4565479)(ESU)
PATCH-292782020-07 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4565536,KB4569509) (CVE-2020-1350) (ESU)
PATCH-292792020-07 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4565536,KB4569509) (CVE-2020-1350) (ESU)
PATCH-292742020-07 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4565537,KB4569509) (CVE-2020-1350)
PATCH-292432020-07 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4565503,KB4569509) (CVE-2020-1350)
PATCH-292442020-07 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB4565503,KB4569509) (CVE-2020-1350)
PATCH-292452020-07 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4565503,KB4569509) (CVE-2020-1350)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234