CVE-2008-0083

The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.

Link	Resource
http://www.securityfocus.com/bid/28551	Patch
http://www.securitytracker.com/id?1019799
http://secunia.com/advisories/29712	Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA08-099A.html	US Government Resource
http://www.vupen.com/english/advisories/2008/1146/references	Vendor Advisory
http://marc.info/?l=bugtraq&m=120845064910729&w=2
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5495
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-022

Configuration 1

cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*

---

Published : 2008-04-08 11:05

Updated : 2018-10-12 09:44

---

NVD link : CVE-2008-0083

Mitre link : CVE-2008-0083

No products.

CWE-94