CVE-2015-6059: Infoleak

Published Oct 14, 2015

Updated

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."

Affected Software

10 affected components

Microsoft JScript=5.6

Microsoft JScript=5.7

Microsoft JScript=5.8

Microsoft VBScript=5.6

Microsoft VBScript=5.7

Microsoft VBScript=5.8

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Oct 14, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6059?

CVE-2015-6059 is classified as a critical vulnerability due to its potential for information disclosure.

How do I fix CVE-2015-6059?

To fix CVE-2015-6059, users should apply the latest security updates provided by Microsoft for affected software.

What products are affected by CVE-2015-6059?

CVE-2015-6059 affects Microsoft VBScript 5.6, 5.7, 5.8, JScript 5.7, 5.8, and Internet Explorer versions 8 through 11.

What type of vulnerability is CVE-2015-6059?

CVE-2015-6059 is categorized as an information disclosure vulnerability that allows attackers to access sensitive data.

Can CVE-2015-6059 be exploited remotely?

Yes, CVE-2015-6059 can be exploited remotely via a crafted web page designed to trigger the vulnerability.