Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS15-053: Description of the security update for VBScript and JScript 5.8: May 12, 2015

MS15-053: Description of the security update for VBScript and JScript 5.8: May 12, 2015

View products that this article applies to.

Summary

This security update resolves address space layout randomization (ASLR) security feature bypasses in the JScript and VBScript scripting engines in Microsoft Windows. An attacker could use one of these ASLR bypasses together with another vulnerability, such as a remote code execution vulnerability, to more reliably run arbitrary code on a target system. 

The update addresses the ASLR bypasses by helping to make sure that affected versions of JScript and VBScript correctly implement the ASLR security feature.

↑ Back to the top

Introduction

Microsoft has released security bulletin MS15-053. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

More Information

↑ Back to the top

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.



Windows Server 2008 R2 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.7601.18xxxWindows 7 and Windows Server 2008 R2SP1GDR
    6.1.7601.22xxxWindows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.



For all supported x64-based versions of Windows Server 2008 R2

File nameFile versionFile sizeDateTimePlatform
Jscript.dll5.8.7601.18811910,84803-Apr-201503:25x64
Jscript.dll5.8.7601.23016910,84803-Apr-201503:32x64
Vbscript.dll5.8.7601.18811610,30403-Apr-201503:26x64
Vbscript.dll5.8.7601.23016610,30403-Apr-201503:32x64
Jscript.dll5.8.7601.18811717,82403-Apr-201503:06x86
Jscript.dll5.8.7601.23016717,82403-Apr-201503:10x86
Vbscript.dll5.8.7601.18811428,54403-Apr-201503:06x86
Vbscript.dll5.8.7601.23016428,54403-Apr-201503:10x86
Jscript.dll5.8.7601.18811717,82403-Apr-201503:06x86
Jscript.dll5.8.7601.23016717,82403-Apr-201503:10x86

↑ Back to the top

Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, kbbug, kblangall, kbfix, kbexpertiseinter, kb, atdownload, kbmustloc

↑ Back to the top

Article Info
Article ID : 3050941
Revision : 1
Created on : 1/7/2017
Published on : 5/12/2015
Exists online : False
Views : 192