CVE-2011-0663: Integer Overflow
Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0663?
CVE-2011-0663 has been rated as critical because it allows remote attackers to execute arbitrary code.
How do I fix CVE-2011-0663?
To fix CVE-2011-0663, apply the latest security updates provided by Microsoft for JScript and VBScript.
Which software versions are affected by CVE-2011-0663?
CVE-2011-0663 affects Microsoft JScript versions 5.6 through 5.8 and VBScript versions 5.6 through 5.8.
Can CVE-2011-0663 be exploited via the web?
Yes, CVE-2011-0663 can be exploited through a crafted web page that targets the scripting engines.
Is there a workaround for CVE-2011-0663 if I cannot update?
A potential workaround for CVE-2011-0663 is to disable scripting engines like JScript and VBScript in your environment.