CVE-2014-0271

Published: Feb 12, 2014Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."

Affected (9)

Products: Microsoft: Internet Explorer, Vbscript

2 products

Internet Explorer

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 10
Microsoft Internet Explorer	Version 11
Microsoft Internet Explorer	Version 6
Microsoft Internet Explorer	Version 7
Microsoft Internet Explorer	Version 8
Microsoft Internet Explorer	Version 9

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Vbscript	Version 5.6
Microsoft Vbscript	Version 5.7
Microsoft Vbscript	Version 5.8

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

http://osvdb.org/103166

Source: secure@microsoft.com

http://secunia.com/advisories/56796

Source: secure@microsoft.com

http://secunia.com/advisories/56814

Source: secure@microsoft.com

http://www.securityfocus.com/bid/65395

Source: secure@microsoft.com

http://www.securitytracker.com/id/1029741

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-011

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/90757

Source: secure@microsoft.com

http://osvdb.org/103166

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/56796

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/56814

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/65395

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1029741

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-010

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-011

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/90757

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.