Title

Microsoft VBScript ASLR Security Bypass Vulnerabilities (MS15-053) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in VBScript. Microsoft VBScript is an interpreted, object-based scripting language that is often used to make websites more flexible or interactive. To exploit these vulnerabilities, an attacker need to locate a system using an affected version of Internet Explorer. If successfully exploited, the attacker would be able to gain access to sensitive information and execute arbitrary code on the target system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-60657

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.