|
|
|||
| Rule General Information |
|---|
| Release Date: | 2019-03-11 | |
| Rule Name: | Common Construct B64 M1 Vulnerability -2 (CVE-2018-8174) | |
| Severity: | ||
| CVE ID: | ||
| CNNVD ID: | ||
| Rule Protection Details |
|---|
| Description: | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. | |
| Impact: | Attackers can exploit this vulnerability to execute arbitrary code in the context of the affected application. | |
| Affected OS: | Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others | |
| Reference: | SecurityFocusBID:103998 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8174 https://blog.0patch.com/2018/05/a-single-instruction-micropatch-for.html ExploitDB:44741 |
|
| Solutions |
|---|
| Updates are available. Please see the references or vendor advisory for more information. |