The VBScript engine in Microsoft Internet Explorer 6 through 11 and VBScript 5.6 through 5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site aka \VBScript Memory Corruption Vulnerability.\