CVE-2011-0031 in Windows
Summary
The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
12/10/2010
Disclosure
02/08/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4298 | Microsoft Windows JScript/VBScript information disclosure | 200 | Not defined | Official fix | CVE-2011-0031 |