Heap Overflow in Windows Script Engine for JScript by Microsoft

CVE-2003-0010

Summary

A vulnerability in the JsArrayFunctionHeapSort function of the Windows Script Engine for JScript (JScript.dll) allows attackers to exploit an integer overflow. By sending a specially crafted web page or HTML email with a large array index value, a heap-based buffer overflow can be triggered, enabling the execution of arbitrary code on the target system. This vulnerability affects various versions of Windows, including Windows XP, Windows 2000, and Windows Server 2003, posing significant risks to users and systems that lack adequate security measures.

References