Description
Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.
References
- 7146 vdb-entry
- oval:org.mitre.oval:def:795 vdb-entry signature
- 20030319 Heap Overflow in Windows Script Engine third-party-advisory
- oval:org.mitre.oval:def:794 vdb-entry signature
- oval:org.mitre.oval:def:200 vdb-entry signature
- MS03-008 vendor-advisory
- 20030319 Windows Scripting Engine issue mailing-list
- 20030319 iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine mailing-list
- oval:org.mitre.oval:def:134 vdb-entry signature