A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka Internet Explorer Remote Code Execution Vulnerability. This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
Weakness
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 9 (including) | 9 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/122.html
- https://cwe.mitre.org/data/definitions/233.html
- https://cwe.mitre.org/data/definitions/58.html
References
- http://www.securityfocus.com/bid/106119
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8619
- https://www.exploit-db.com/exploits/46023/
- http://www.securityfocus.com/bid/106119
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8619
- https://www.exploit-db.com/exploits/46023/