Microsoft Windows jscript!JsArrayFunctionHeapSort Out-Of-Bounds Write
Posted on 19 December 2018
There is an out-of-bounds write vulnerability in jscript.dll in the JsArrayFunctionHeapSort function. This vulnerability can be exploited through Internet Explorer or potentially through WPAD over local network.
