CVE-2015-6136: Buffer Overflow

Published Dec 9, 2015

Updated

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Affected Software

8 affected components

Microsoft JScript=5.7

Microsoft JScript=5.8

Microsoft VBScript=5.7

Microsoft VBScript=5.8

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Dec 9, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6136?

CVE-2015-6136 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2015-6136?

To address CVE-2015-6136, ensure that you have applied the latest security updates from Microsoft for affected versions of VBScript and JScript.

What products are affected by CVE-2015-6136?

CVE-2015-6136 affects Microsoft VBScript and JScript versions 5.7 and 5.8 and is present in Internet Explorer versions 8 through 11.

Can CVE-2015-6136 be exploited remotely?

Yes, CVE-2015-6136 can be exploited remotely via a specially crafted website.

What type of vulnerability is CVE-2015-6136?

CVE-2015-6136 is classified as a memory corruption vulnerability in the scripting engines.