// back  Heap Overflow in Windows Script Engine    Microsoft
Corp.'s Windows Script Engine within the Windows operating
system (OS) interprets and executes script code written in
scripting languages such as VBscript and JScript. Such script
code can be used to add functionality to web pages, or to
automate tasks within the OS or a program. Script code can be
written in several different scripting languages, such as Visual
Basic Script, JScript or JavaScript.   By passing malicious
JavaScript via Internet Explorer (IE), Outlook or Outlook
Express, remote attackers can exploit an integer overflow within
the Windows Script Engine causing a corruption of the heap
thereby allowing for arbitrary code execution. Specifically, the
vulnerability lies in the Windows Script Engine's implementation
of JScript that is provided by jscript.dll (located in
%SystemRoot%system32). The following snippet of JavaScript code
demonstrates the existence of the vulnerability by crashing IE
on a vulnerable Windows system:      var tri