• info
• discussion
• exploit
• solution
• references

Microsoft JScript Scripting Engine Keyword Arguments Remote Code Execution Vulnerability

Solution:
The vendor has released a security advisory and fixes. Please see the references for details.


Microsoft JScript 5.1

• Microsoft Security Update for Windows 2000 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=2bb3af8d-f36c -4497-9f48-fc59bcff2583

Microsoft JScript 5.6

• Microsoft Security Update for Jscript 5.6 for Windows Server 2003 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=6acc9d2d-b71f -4b5c-9aea-b217b6ae240b


• Microsoft Security Update for Jscript 5.6 for Windows Server 2003 for Itanium-based Systems (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=e78cf021-54f5 -4526-b5f0-f781aebf9d72


• Microsoft Security Update for Jscript 5.6 for Windows Server 2003 x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0de3ab1-73e9 -4a09-841f-81ade41a8c81


• Microsoft Security Update for Jscript 5.6 for Windows XP (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=0af373b2-2240 -4079-a748-a38d1bc06f39


• Microsoft Security Update for Jscript 5.6 for Windows XP x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=0d671004-da4e -4dbd-a066-861b53b0c59c


• Microsoft Security Update for Windows 2000 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=2bb3af8d-f36c -4497-9f48-fc59bcff2583

Microsoft JScript 5.7

• Microsoft Security Update for Jscript 5.7 for Windows Server 2003 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=6af5d034-fd89 -42e2-bc18-d44b7a6b0a85


• Microsoft Security Update for Jscript 5.7 for Windows Server 2003 for Itanium-based Systems (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=fb1ca290-cea4 -49c0-a37e-613a654bff3c


• Microsoft Security Update for Jscript 5.7 for Windows Server 2003 x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=8f48bc05-ffac -4a21-8d21-dd20355cda8a


• Microsoft Security Update for Jscript 5.7 for Windows Server 2008 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=df88e6e5-78d3 -4fa6-858d-b935d812cada


• Microsoft Security Update for Jscript 5.7 for Windows Server 2008 for Itanium-based Systems (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=b84fca1d-914d -45af-a48c-d9bc5d20c6b7


• Microsoft Security Update for Jscript 5.7 for Windows Server 2008 x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=f584f8ca-f6b1 -4285-a44c-3df5e51e75de


• Microsoft Security Update for Jscript 5.7 for Windows Vista (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=bcb12e57-f5d6 -4b4e-88ab-13c28137f11a


• Microsoft Security Update for Jscript 5.7 for Windows Vista for x64-based Systems (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=8b1b76d5-a6b0 -4c2f-8768-e55e82c2c118


• Microsoft Security Update for Jscript 5.7 for Windows XP (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=c933377d-e0bc -4334-bc75-029045d7a62a


• Microsoft Security Update for Jscript 5.7 for Windows XP x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=9aae426d-ee9a -4736-b0a2-e0f8890a6895


• Microsoft Security Update for Windows 2000 (KB975542)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2773db5-b17d -4b98-b4e2-219b23854abd&displaylang=en

Microsoft JScript 5.8

• Microsoft Security Update for Jscript 5.8 for Windows Server 2003 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=ecf9f7e2-3104 -4de2-8b3d-99dcdcae6e62


• Microsoft Security Update for Jscript 5.8 for Windows Server 2003 x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=643f9e2f-2e5b -48dd-b1a0-22ccb633ed18


• Microsoft Security Update for Jscript 5.8 for Windows Server 2008 (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=e7b07be6-a4f8 -4847-9c55-9b3d2965fa77


• Microsoft Security Update for Jscript 5.8 for Windows Server 2008 x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=9eddbb89-4178 -49c2-836a-2d292fe50936


• Microsoft Security Update for Jscript 5.8 for Windows Vista (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=80e7390f-df39 -4d99-b2e1-01c7f6a951bb


• Microsoft Security Update for Jscript 5.8 for Windows Vista for x64-based Systems (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=24457cdd-1973 -40c9-9c2d-c1a75fdfa7fa


• Microsoft Security Update for Jscript 5.8 for Windows XP (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=992602d8-d857 -41cf-b7b1-527afdc1dc0f


• Microsoft Security Update for Jscript 5.8 for Windows XP x64 Edition (KB971961)
  http://www.microsoft.com/downloads/details.aspx?familyid=00bae02a-64eb -4b91-965f-da2dc987a2ff