description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0666, CVE-2019-0667.
problem types: Remote Code Execution
affected:
{
product: Windows
vendor: Microsoft
versions:
status: affected, version: 7 for 32-bit Systems Service Pack 1
status: affected, version: 7 for x64-based Systems Service Pack 1
status: affected, version: 8.1 for 32-bit systems
status: affected, version: 8.1 for x64-based systems
status: affected, version: RT 8.1
status: affected, version: 10 for 32-bit Systems
status: affected, version: 10 for x64-based Systems
status: affected, version: 10 Version 1607 for 32-bit Systems
status: affected, version: 10 Version 1607 for x64-based Systems
status: affected, version: 10 Version 1803 for x64-based Systems
status: affected, version: 10 Version 1803 for ARM64-based Systems
status: affected, version: 10 Version 1809 for 32-bit Systems
status: affected, version: 10 Version 1809 for x64-based Systems
status: affected, version: 10 Version 1809 for ARM64-based Systems
status: affected, version: 10 Version 1709 for ARM64-based Systems
}
{
product: Windows Server
vendor: Microsoft
versions:
status: affected, version: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)
status: affected, version: 2008 R2 for Itanium-Based Systems Service Pack 1
status: affected, version: 2008 R2 for x64-based Systems Service Pack 1
}
