Description
The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
References
- MS11-009 vendor-advisory
- 46139 vdb-entry
- ms-win-jscript-info-disclosure(64919) vdb-entry
- 1025044 vdb-entry
- 43249 third-party-advisory
- 70827 vdb-entry
- ADV-2011-0322 vdb-entry
- oval:org.mitre.oval:def:12313 vdb-entry signature