CVE-2014-6363: Critical severity microsoft vbscript vulnerability

Published Dec 11, 2014

Updated

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."

Affected Software

9 affected components

Microsoft VBScript=5.6

Microsoft VBScript=5.7

Microsoft VBScript=5.8

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Dec 11, 2014

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6363?

CVE-2014-6363 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2014-6363?

To mitigate CVE-2014-6363, users should apply the latest security patches provided by Microsoft.

What products are affected by CVE-2014-6363?

CVE-2014-6363 affects Microsoft VBScript versions 5.6 to 5.8 and Internet Explorer versions 6 to 11.

What is the impact of CVE-2014-6363?

The impact of CVE-2014-6363 includes the possibility of arbitrary code execution or denial of service through memory corruption.

How can CVE-2014-6363 be exploited?

CVE-2014-6363 can be exploited through malicious web pages that target vulnerable versions of VBScript and Internet Explorer.