Microsoft Windows jscript!JsArrayFunctionHeapSort Out-Of-Bounds Write

There is an out-of-bounds write vulnerability in jscript.dll in the JsArrayFunctionHeapSort function. This vulnerability can be exploited through Internet Explorer or potentially through WPAD over local network.

Continue reading...