CVE-2003-0010 in Windows

Sumário

de MITRE

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 02/01/2003
• Divulgação: 24/03/2003
• Moderação: aceite
• Entrada: VDB-20213
• CPE: pronto
• CWE: CWE-192 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.23889
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Government, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0010
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0010
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0010/