Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Roland Postle

#37085of 53,633
7.5Total CVSS
Vulnerabilities · 1
PT-2003-1308
7.5
2003-03-21
Microsoft · Windows Script Engine For Jscript · CVE-2003-0010
**Name of the Vulnerable Software and Affected Versions** Windows Script Engine for JScript (JScript.dll) (affected versions not specified) **Description** The issue is related to an integer overflow in the JsArrayFunctionHeapSort function. This allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value, enabling a heap-based buffer overflow attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.