Users login

Create an account »


Users login

Home » Hacking News » Microsoft Windows Script Engine JScript.DLL heap overflow

Microsoft Windows Script Engine JScript.DLL heap overflow

by Nikola Strahija on March 27th, 2003 It has been reported that a heap overflow vulnerability exists in the Microsoft Script Engine for JScript. Execution of arbitrary instructions is possible.

Exploitation may occur through a malicious web page or through HTML e-mail and will result in execution of arbitrary instructions in the context of a client application which invokes the script engine.

- Microsoft Windows XP (Home and Professinal)
- Microsft Windows 2000 (Professional, Server, Advanced Server, Datacenter Server, Terminal Services)
- Microsoft Windows 98 (and SE)
- Microsoft Windows ME
- Microsoft Windows NT 4.0 (Workstation,Enterprise Server, Server, Terminal Server)

Microsoft Windows 2000 and XP family:

Microsoft Windows NT 4.0 family:

Microsft Windows 98 and ME family:

Discovered by:
Roland Postle, mail (at)

Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.


Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »