Fwd: [CIVN-0280] Remote Code Execution Vulnerability in VB Script Engine

Remote Code Execution Vulnerability in VB Script Engine

Severity Rating: High

Software Affected:               

Internet Explorer 9

Internet Explorer 11

Overview:

A remote code execution vulnerability has been reported in VB Script Engine

which could allow an attacker to execute arbitrary code on the targeted

system.

Description

This exists in Microsoft VB Script Engine due to improper handling the

objects in memory by the affected VB Script engine. A remote attacker could

exploit this vulnerability by convincing a user to open a specially crafted

document or by convincing a user to visit a malicious web application.

Successful exploitation of this vulnerability could execute arbitrary code

in the context of the current user on the targeted system.

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin:

Vendor Information

Microsoft

References:

Microsoft

- -1403

CVE Name

CVE-2020-1403