VYPR
Get started
← All advisories
High severity8.8NVD Advisory· Published Apr 13, 2011· Updated Apr 29, 2026

CVE-2011-0663

CVE-2011-0663

Description

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."

Affected products

6
  • Microsoft/Jscript3 versions
    cpe:2.3:a:microsoft:jscript:5.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:jscript:5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:jscript:5.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:jscript:5.8:*:*:*:*:*:*:*
  • Microsoft/Vbscript3 versions
    cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:vbscript:5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:vbscript:5.8:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.