high7.5Public exploit code
CVE-2018-8625
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VBScript - VbsErase Reference Leak Use-After-Free2018-12-20 · dos · windows · Verified
Impact
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 9, 10, 11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106122
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8625
- https://www.exploit-db.com/exploits/46022/
- http://www.securityfocus.com/bid/106122
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8625
- https://www.exploit-db.com/exploits/46022/