>> Microsoft Windows JScript Remote Command Execution Vulnerability (MS06-023)
Title : Microsoft Windows JScript Remote Command Execution Vulnerability (MS06-023) VUPEN ID : VUPEN/ADV-2006-2321 CVE ID : CVE-2006-1313
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-06-13
Technical Description
A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete control of an affected system. This flaw is due to a memory corruption error in the implementation of the ECMA 262 language specification (ECMAScript Edition 3) JScript that releases objects early, which could be exploited by attackers to execute arbitrary commands by convincing a user to visit a malicious Web site.
