Intrusion PreventionMS.JScript.VBScript.Engine.Information.Disclosure
Description
This indicates an attack attempt to exploit a memory-corruption vulnerability in Microsoft JScript and VBScript engine.
This vulnerability is due to the vulnerable software's inability to properly validate data. An attacker may exploit this to get the memory information in the affected process.
Affected Products
JScript 5.6
JScript 5.7
JScript 5.8
VBScript 5.6
VBScript 5.7
VBScript 5.8
Impact
Information Disclosure
Recommended Actions
Apply the patch, available from the vendor's web site:
http://www.microsoft.com/technet/security/Bulletin/MS11-009.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 25752 |
| Created | Feb 09, 2011 |
| Updated | Jan 08, 2021 |
| Risk |
|
| CVE ID | CVE-2011-0031 |
| Exploit Prediction Score | 2.58% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | IE |