Oval Definition:oval:org.mitre.oval:def:5495
Revision Date:2008-05-19Version:43
Title:VBScript and JScript Remote Code Execution Vulnerability
Description:The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-0083
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):
Definition Synopsis
  • Windows 2000 SP4
  • Microsoft Windows 2000 SP4 or later is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows XP SP2
  • Microsoft Windows XP SP2 or later is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows XP SP1
  • Microsoft Windows XP Professional x64 Edition SP1 is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows XP SP2
  • Microsoft Windows XP x64 Edition SP2 is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows Server 2003 SP1
  • Microsoft Windows Server 2003 SP1 (x86) is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows Server 2003 SP2
  • Microsoft Windows Server 2003 SP2 (x86) is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows Server 2003 SP1
  • Microsoft Windows Server 2003 SP1 (x64) is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • OR Windows Server 2003 SP2
  • Microsoft Windows Server 2003 SP2 (x64) is installed
  • AND Jscript.dll version is less than 5.6.0.8835
  • BACK