Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Windows脚本引擎堆破坏漏洞
Vulnerability Description
Microsoft Windows脚本引擎(Script Engine)是Window操作系统解析和执行如VBscript和JScript脚本语言的系统。这些脚本代码可以用于对WEB页增加功能,或者在操作系统或程序中自动执行某些任务,脚本代码可以由Visual Basic Script、JScript或JavaScript编写。 Windows脚本引擎JsArrayFunctionHeapSort函数对外部输入缺少正确检查,远程或者本地攻击者利用这个漏洞提供恶意脚本代码,诱使用户执行,可能以用户进程权限在
CVSS Information
N/A
Vulnerability Type
N/A