CVE-2015-6055: Buffer Overflow

Published Oct 14, 2015

Updated

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Filter arguments, aka "Scripting Engine Memory Corruption Vulnerability."

Affected Software

10 affected components

Microsoft JScript=5.6

Microsoft JScript=5.7

Microsoft JScript=5.8

Microsoft VBScript=5.6

Microsoft VBScript=5.7

Microsoft VBScript=5.8

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Oct 14, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6055?

CVE-2015-6055 has a critical severity rating due to its potential to allow remote code execution.

How do I fix CVE-2015-6055?

To fix CVE-2015-6055, apply the latest security updates from Microsoft for JScript and VBScript engines.

Which software versions are affected by CVE-2015-6055?

CVE-2015-6055 affects Microsoft JScript versions 5.7 and 5.8, and VBScript versions 5.7 and 5.8.

Can CVE-2015-6055 cause a denial of service?

Yes, CVE-2015-6055 can lead to a denial of service through memory corruption.

Is Internet Explorer affected by CVE-2015-6055?

Internet Explorer 8 through 11 are affected by CVE-2015-6055 due to their use of the vulnerable scripting engines.