← back
CVE-2015-2482

CVE-2015-2482

EPSS 32.3%
The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a JavaScript regular expression, aka "Scripting Engine Memory Corruption Vulnerability."
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/40798/unverifiedexploitdbwww.exploit-db.com/exploits/40798unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-106https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-108http://seclists.org/fulldisclosure/2015/Oct/54https://www.exploit-db.com/exploits/40798/http://www.securitytracker.com/id/1033800http://www.zerodayinitiative.com/advisories/ZDI-15-515