Remote Code Execution Vulnerability Disclosed in Windows JScript Component

guest · May 30, 2018

Remote Code Execution Vulnerability Disclosed in Windows JScript Component
May 30, 2018
https://www.bleepingcomputer.com/ne...ility-disclosed-in-windows-jscript-component/

A vulnerability exists in the Windows operating system's JScript component that can allow an attacker to execute malicious code on a user's computer.

Responsible for discovering this bug is Dmitri Kaslov of Telspace Systems, who passed it along to Trend Micro's Zero-Day Initiative (ZDI), a project that intermediates the vulnerability disclosure process between independent researchers and larger companies.

ZDI experts reported the issue to Microsoft back in January, but Microsoft has yet to release a patch for this vulnerability. Yesterday, ZDI published a summary containing light technical details about the bug.
Microsoft is working on a patch
According to Gorenc, a patch is coming. "To the best of our knowledge, Microsoft does still intend to release a fix for this bug. However, they did not complete the fix within the timelines set out in our disclosure policy."
Click to expand...

Log in or Sign up

Remote Code Execution Vulnerability Disclosed in Windows JScript Component

guest Guest

Log in or Sign up

Remote Code Execution Vulnerability Disclosed in Windows JScript Component

guest Guest

Useful Searches