Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS06-023 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.8 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Vulnerability in Microsoft JScript Could Allow Remote Code Execution (917344) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1067 | |||
| Oval ID: | oval:org.mitre.oval:def:1067 | ||
| Title: | Microsoft JScript Memory Corruption Vulnerability | ||
| Description: | Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-1313 | Version: | 5 |
| Platform(s): | Microsoft Windows 98 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:1644 | |||
| Oval ID: | oval:org.mitre.oval:def:1644 | ||
| Title: | DEPRECATED: Microsoft JScript Memory Corruption Vulnerability (Win2K) | ||
| Description: | Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-1313 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Operating System |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:1785 | |||
| Oval ID: | oval:org.mitre.oval:def:1785 | ||
| Title: | DEPRECATED: Microsoft JScript Memory Corruption Vulnerability (Win2K w/ JScript 5.6) | ||
| Description: | Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-1313 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Operating System |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:2003 | |||
| Oval ID: | oval:org.mitre.oval:def:2003 | ||
| Title: | DEPRECATED: Microsoft JScript Memory Corruption Vulnerability (WinXP) | ||
| Description: | Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-1313 | Version: | 2 |
| Platform(s): | Microsoft Windows XP | Product(s): | Operating System |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 26434 | Microsoft JScript Object Release Memory Corruption Windows contains a flaw that may allow a malicious user to execute arbitary code. The issue is triggered when JScript releases objects early, leading to memory corruption and may allow an attacker to run arbitary code. It is possible that the flaw may allow arbitary code executiomn resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-06-13 | Name : Arbitrary code can be executed on the remote host through the web or email cl... File : smb_nt_ms06-023.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:45:23 |
|
