National Cyber Awareness System

Vulnerability Summary for CVE-2006-1313

Overview

Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-164A

Name: TA06-164A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-164A.html

US-CERT Vulnerability Note: VU#390044

Name: VU#390044

Hyperlink:http://www.kb.cert.org/vuls/id/390044

External Source: BID

Name: 18359

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/18359

External Source: MS

Name: MS06-023

Type: Advisory; Patch Information

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-023.mspx

External Source: SECUNIA

Name: 20620

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/20620

External Source: XF

Name: ms-jscript-code-execution(26805)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26805

External Source: VUPEN

Name: ADV-2006-2321

Hyperlink:http://www.vupen.com/english/advisories/2006/2321

External Source: OSVDB

Name: 26434

Hyperlink:http://www.osvdb.org/26434

External Source: SECTRACK

Name: 1016283

Hyperlink:http://securitytracker.com/id?1016283

US Government Resource: oval:org.mitre.oval:def:2003

Name: oval:org.mitre.oval:def:2003

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2003

US Government Resource: oval:org.mitre.oval:def:1785

Name: oval:org.mitre.oval:def:1785

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1785

US Government Resource: oval:org.mitre.oval:def:1644

Name: oval:org.mitre.oval:def:1644

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1644

US Government Resource: oval:org.mitre.oval:def:1067

Name: oval:org.mitre.oval:def:1067

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1067

References to Check Content

Identifier:oval:org.mitre.oval:def:1067

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1067

Identifier:oval:org.mitre.oval:def:1785

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1785

Identifier:oval:org.mitre.oval:def:1644

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1644

Identifier:oval:org.mitre.oval:def:2003

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:2003