Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-07935
HistoryJul 15, 2021 - 12:00 a.m.

jsish Jsi_ObjSetLength function buffer overflow vulnerability

2021-07-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.008 Low

EPSS

Percentile

82.2%

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product’s Jsi_ObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code through this vulnerability.

CPENameOperatorVersion
jsish jsishlt3.0.8

0.008 Low

EPSS

Percentile

82.2%

Related for CNVD-2022-07935