CVE-2015-2482: Buffer Overflow

Published Oct 14, 2015

Updated

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a JavaScript regular expression, aka "Scripting Engine Memory Corruption Vulnerability."

Affected Software

10 affected components

Microsoft JScript=5.6

Microsoft JScript=5.7

Microsoft JScript=5.8

Microsoft VBScript=5.6

Microsoft VBScript=5.7

Microsoft VBScript=5.8

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Oct 14, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2482?

CVE-2015-2482 is considered important due to its potential for remote code execution and denial of service.

How do I fix CVE-2015-2482?

To fix CVE-2015-2482, it is recommended to apply the latest security updates provided by Microsoft for JScript and VBScript.

What versions are affected by CVE-2015-2482?

CVE-2015-2482 affects Microsoft JScript versions 5.6, 5.7, 5.8 and Microsoft VBScript versions 5.6, 5.7, 5.8.

Can CVE-2015-2482 be exploited via a web browser?

Yes, CVE-2015-2482 can be exploited through Internet Explorer versions 8 to 11 and other Microsoft products using the vulnerable scripting engines.

What types of attacks can result from CVE-2015-2482?

Attackers can execute arbitrary code or cause a denial of service through memory corruption exploiting CVE-2015-2482.