Signature Detail

HTTP: Microsoft VBScript CVE-2014-6363 Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft VBScript. A successful attack can lead to arbitrary code execution.

Extended Description

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."

Affected Products

• Microsoft internet_explorer 10
• Microsoft internet_explorer 11
• Microsoft internet_explorer 6
• Microsoft internet_explorer 7
• Microsoft internet_explorer 8
• Microsoft internet_explorer 9
• Microsoft vbscript 5.6
• Microsoft vbscript 5.7
• Microsoft vbscript 5.8

References

• CVE: CVE-2014-6363