The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."

The installed version of the VBScript Scripting Engine has a memory corruption vulnerability due to improper handling of objects in memory.
If an attacker can trick a user on the system into viewing or opening malicious content, this issue could be leveraged to execute arbitrary code on the affected system, subject to the user's privileges.

The remote host is missing Internet Explorer (IE) Security Update 2909921.

The installed version of IE is affected by multiple privilege escalation and memory corruption vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. Additionally, the installed version of IE is affected by an information disclosure vulnerability.

ID	Name	Product	Family	Severity
72434	MS14-011: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (2928390)	Nessus	Windows : Microsoft Bulletins	high
72433	MS14-010: Cumulative Security Update for Internet Explorer (2909921)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2014-0271

high

Tenable Plugins

high

high