CVE-2011-0663

EPSS 26.22%
Veröffentlicht 13.04.2011 18:55:01
Zuletzt bearbeitet 16.06.2026 23:27:50
Erkennungen
Login

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 11

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Jscript Version 5.6

   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Vbscript Version 5.6

   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Jscript Version 5.7

   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition itanium
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Vbscript Version 5.7

Microsoft ≫ Jscript Version 5.8

   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows 7 Version -
   Microsoft ≫ Windows 7 Version - Update sp1 Edition x64
   Microsoft ≫ Windows 7 Version - Update sp1 Edition x86
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Server 2008 Version r2 Edition itanium
   Microsoft ≫ Windows Server 2008 Version r2 Edition x64
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Vbscript Version 5.8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	26.22%	0.977

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://www.us-cert.gov/cas/techalerts/TA11-102A.html

US Government Resource

http://osvdb.org/71774

http://secunia.com/advisories/44162

http://www.securityfocus.com/bid/47249

http://www.securitytracker.com/id?1025333

http://www.vupen.com/english/advisories/2011/0949

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-031

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12673

https://nvd.nist.gov/vuln/detail/CVE-2011-0663

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-0663

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-0663

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2011-0663