CVE-2011-0663

CVE Database · CVE-2011-0663

CVE-2011-0663

· HIGHModified

CVSS v3.1

8.8

EPSS

26.22%

Published

Apr 13, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-189CWE-190

Affected Products (36)

microsoft · jscriptvulnerable

microsoft · vbscriptvulnerable

microsoft · windows_2003_server

microsoft · windows_server_2003

microsoft · windows_xp

microsoft · jscriptvulnerable

microsoft · vbscriptvulnerable

microsoft · windows_2003_server

microsoft · windows_server_2003

microsoft · windows_server_2008

References (16)

http://osvdb.org/71774

http://secunia.com/advisories/44162

http://www.securityfocus.com/bid/47249

http://www.securitytracker.com/id?1025333

http://www.us-cert.gov/cas/techalerts/TA11-102A.html

US Government Resource

http://www.vupen.com/english/advisories/2011/0949

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-031

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12673

http://osvdb.org/71774

http://secunia.com/advisories/44162

http://www.securityfocus.com/bid/47249

KEV Catalog EPSS Scores Vendors All CVEs