Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Roland Postle

#37085de 53,635
7.5CVSS total
Vulnerabilidades · 1
PT-2003-1308
7.5
2003-03-21
Microsoft · Windows Script Engine For Jscript · CVE-2003-0010
**Name of the Vulnerable Software and Affected Versions** Windows Script Engine for JScript (JScript.dll) (affected versions not specified) **Description** The issue is related to an integer overflow in the JsArrayFunctionHeapSort function. This allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value, enabling a heap-based buffer overflow attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.