CVE Vulnerabilities

CVE-2003-0010

Published: Mar 24, 2003 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.

Affected Software

NameVendorStart VersionEnd Version
Windows_2000Microsoft**
Windows_2000_terminal_servicesMicrosoft**
Windows_98Microsoft**
Windows_98seMicrosoft**
Windows_meMicrosoft**
Windows_ntMicrosoft4.0 (including)4.0 (including)
Windows_ntMicrosoft4.0-sp1 (including)4.0-sp1 (including)
Windows_ntMicrosoft4.0-sp2 (including)4.0-sp2 (including)
Windows_ntMicrosoft4.0-sp3 (including)4.0-sp3 (including)
Windows_ntMicrosoft4.0-sp4 (including)4.0-sp4 (including)
Windows_ntMicrosoft4.0-sp5 (including)4.0-sp5 (including)
Windows_ntMicrosoft4.0-sp6 (including)4.0-sp6 (including)
Windows_ntMicrosoft4.0-sp6a (including)4.0-sp6a (including)
Windows_xpMicrosoft**

References