First published: Tue Apr 08 2008(Updated: )
The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows XP | ||
Microsoft Windows 2003 Server | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows 2000 | =sp4 | |
Microsoft Windows 2003 Server | =sp1 | |
Microsoft Windows 2003 Server | =sp1 | |
Microsoft Windows 2003 Server | =sp2 | |
Microsoft Windows 2003 Server | ||
Microsoft Windows 2003 Server | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0083 is rated as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
To address CVE-2008-0083, ensure that your system is updated with the latest security patches provided by Microsoft.
CVE-2008-0083 affects Microsoft Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1 and SP2.
CVE-2008-0083 exploits improper decoding in the VBScript and JScript scripting engines.
As a temporary measure for CVE-2008-0083, disabling the scripting engines may reduce exposure until a patch is applied.