|CVSS SCORE||6.8, (AV:N/AC:M/Au:N/C:P/I:P/A:P)|
The specific flaw exists within the code that implements various built-in string manipulation functions in JScript. By performing actions in JScript, an attacker can trigger an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code under the context of the current process.
Microsoft has issued an update to correct this vulnerability. More details can be found at: