Vulnwatch mailing list archives

Windows Scripting Engine issue

From: Chris Wysopal <weld () vulnwatch org>
Date: Wed, 19 Mar 2003 20:10:54 +0000 (GMT)


A flaw in JScript has been found that allows an attacker to run arbitrary
code if a user views a malicious web page or receives a malicious email. It
effects all versions of Windows from XP back to Windows 98 and NT 4.0.

Turning off ActiveScript protects you from the issue.

More info here:
http://www.microsoft.com/technet/security/bulletin/MS03-008.asp

Current thread:

Windows Scripting Engine issue Chris Wysopal (Mar 19)