high7.5Public exploit code
CVE-2018-8619
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VBScript - MSXML Execution Policy Bypass2018-12-20 · dos · windows · Verified
Impact
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 9, 10, 11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106119
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8619
- https://www.exploit-db.com/exploits/46023/
- http://www.securityfocus.com/bid/106119
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8619
- https://www.exploit-db.com/exploits/46023/