CVE-2016-0002 – The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engine

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability.”

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0002

Reference (s):

• IDEFENSE:20160112 Microsoft Internet Explorer VBScript “Assignvar” Use-After-Free Vulnerability
• URL: https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1215
• MS:MS16-001
• URL: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001
• MS:MS16-003