CVE-2003-0010

CVE-2003-0010 describes an integer overflow vulnerability in the JsArrayFunctionHeapSort function within the Windows Script Engine for JScript (JScript.dll), affecting various Windows operating systems including 2000, 98, ME, NT, and XP. This flaw allows remote attackers to execute arbitrary code by crafting a malicious web page or HTML email that exploits a large array index value, leading to a heap-based buffer overflow. The vulnerability carries a CVSS score of 7.5, indicating a high severity with a network attack vector, low complexity, and potential for partial impact on confidentiality, integrity, and availability. While the EPSS score suggests a moderate likelihood of exploitation, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this older vulnerability.