PT-2009-4380

CVE-2009-1920

·

Published

2009-09-08

·

Updated

2023-12-07

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: JScript scripting engine versions 5.1, 5.6, 5.7, and 5.8
Description: The issue is related to the improper loading of decoded scripts into memory before execution, which can lead to memory corruption. This can be exploited by remote attackers via a crafted web site, allowing them to execute arbitrary code.
Recommendations: For JScript scripting engine version 5.1, update to a version that properly handles script loading into memory. For JScript scripting engine version 5.6, update to a version that properly handles script loading into memory. For JScript scripting engine version 5.7, update to a version that properly handles script loading into memory. For JScript scripting engine version 5.8, update to a version that properly handles script loading into memory.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾