[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255861

 
 

909

 
 

199025

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-1313Date: (C)2006-06-13   (M)2023-12-22


Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1016283
BID-18359
SECUNIA-20620
OSVDB-26434
ADV-2006-2321
MS06-023
TA06-164A
VU#390044
ms-jscript-code-execution(26805)
oval:org.mitre.oval:def:1067
oval:org.mitre.oval:def:1644
oval:org.mitre.oval:def:1785
oval:org.mitre.oval:def:2003

CPE    24
cpe:/o:microsoft:windows_xp::sp1:media_center
cpe:/o:microsoft:windows_2000::sp3:professional
cpe:/o:microsoft:windows_2000::sp1:professional
cpe:/o:microsoft:windows_2000::sp2:advanced_server
...
OVAL    4
oval:org.mitre.oval:def:2003
oval:org.mitre.oval:def:1785
oval:org.mitre.oval:def:1067
oval:org.mitre.oval:def:1644
...

© SecPod Technologies