Re:On VBScript
by z3t4 on Thursday December 20, 2018 @03:38AM
(#18723349)
I'm pretty sure vbScript as a language, or even the vbScript engine in Windows has not got any updates whatsoever in the last 15 years. It's still a nice language though, not to be confused with Visual Basic, (like JavaScript vs Java).
[ Parent
| on HN ]
VBScript is basically dynamically typed VB6. It's not a nice language - it has all the worst parts of VB6, and then adds its own. Take a look at some of Eric Lippert's old blog posts from the days when he was working on VBScript:
https://blogs.msdn.microsoft.com/ericlippert/tag/vbscript/
To give one example, that is somewhat relevant here because it describes one of the biggest misfeatures of the language - default properties - that is used in the exploit:
https://blogs.msdn.microsoft.com/ericlippert/2005/08/30/vbsc...