Description
The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
References
- TA08-099A third-party-advisory
- SSRT080048 vendor-advisory
- MS08-022 vendor-advisory
- 28551 vdb-entry
- ADV-2008-1146 vdb-entry
- 1019799 vdb-entry
- oval:org.mitre.oval:def:5495 vdb-entry signature
- 29712 third-party-advisory