Microsoft Scripting Runtime Object Library Use After Free

Strike ID:
E14-7lq01
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
6
Year:
2014

Description

This strike exploits a use after free error triggered because of an error Microsoft Scripting Runtime Object Library . If a user opens a specially crafted web page, on a vulnerable machine, a use after free memory corruption is trigered that can lead to arbitrary code execution using local privileges. All versions of Microsoft Windows are vulnerable to this attack.

CVE

References

Bid