The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before execution, which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption, aka "JScript Remote Code Execution Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.us-cert.gov/cas/techalerts/TA09-251A.html - US Government Resource | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316 - |
07 Dec 2023, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:* |
cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* |
Information
Published : 2009-09-08 22:30
Updated : 2024-11-21 01:03
NVD link : CVE-2009-1920
Mitre link : CVE-2009-1920
CVE.ORG link : CVE-2009-1920
JSON object : View
Products Affected
microsoft
- windows_server_2008
- windows_xp
- windows_2000
- windows_vista
- windows_server_2003
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')