CVE-2003-0010: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 23.9% chance of exploitation in the next 30 days.

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2000 Terminal Services: any version
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2003-03-24. Last modified 2026-06-16.