CVE-2015-2482 – The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engine

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted replace operation with a JavaScript regular expression, aka “Scripting Engine Memory Corruption Vulnerability.”

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2482

Reference (s):

• EXPLOIT-DB:40798
• URL: https://www.exploit-db.com/exploits/40798/
• FULLDISC:20151013 JScript 5.7 (MSIE 8) RegExpBase::FBadHeader regular expression use-after-free
• URL: http://seclists.org/fulldisclosure/2015/Oct/54
• http://www.zerodayinitiative.com/advisories/ZDI-15-515