The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a JavaScript regular expression, aka "Scripting Engine Memory Corruption Vulnerability."

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3096441. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

The VBScript and JScript engines on the remote host are affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist in     the VBScript and JScript engines due to improper     handling of objects in memory. A remote attacker can     exploit these vulnerabilities by convincing a user to     visit a specially crafted website, resulting in the     execution of arbitrary code in the context of the     current user. (CVE-2015-2482, CVE-2015-6055)

  - A security feature bypass vulnerability exists in the     VBScript and JScript engines due to a failure to use     Address Space Layout Randomization (ASLR). An attacker     can exploit this to predict memory offsets in a call     stack. (CVE-2015-6052)

  - An information disclosure vulnerability exists in the     VBScript and JScript engines due to improper handling of     objects in memory. A remote attacker can exploit this to     disclose the contents of memory. (CVE-2015-6059)

ID	Name	Product	Family	Severity
86367	MS15-106: Cumulative Security Update for Internet Explorer (3096441)	Nessus	Windows : Microsoft Bulletins	high
86365	MS15-108: Security Update for JScript and VBScript to Address Remote Code Execution (3089659)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2015-2482

high

Tenable Plugins

high

high