PT-2019-12298 · Artifex · Artifex Mujs

🗓️ 21 Apr 2019 00:00:00Reported by Positive TechnologiesType

Artifex MuJS 1.0.5 has unlimited recursion in the regexp match function due to a missing depth check.

Reporter	Title	Published	Views	Family All 23
ATTACKERKB	CVE-2022-30974	18 May 202211:15	–	attackerkb
Circl	CVE-2019-11413	18 May 202214:28	–	circl
CNVD	Artifex Software MuJS Resource Management Error Vulnerability	22 Apr 201900:00	–	cnvd
CVE	CVE-2019-11413	21 Apr 201919:14	–	cve
Cvelist	CVE-2019-11413	21 Apr 201919:14	–	cvelist
Debian CVE	CVE-2019-11413	21 Apr 201919:14	–	debiancve
EUVD	EUVD-2019-3088	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 32 Update: mujs-1.0.9-1.fc32	10 Nov 202001:29	–	fedora
Fedora	[SECURITY] Fedora 31 Update: mujs-1.0.9-1.fc31	10 Nov 202001:21	–	fedora
Fedora	[SECURITY] Fedora 33 Update: mujs-1.0.9-1.fc33	10 Nov 202001:19	–	fedora

Source	Link
github	www.github.com/ccxvii/mujs/commit/00d4606c3baf813b7b1c176823b2729bf51002a2
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI
bugs	www.bugs.ghostscript.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-11413
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H
osv	www.osv.dev/vulnerability/CVE-2019-11413
security	www.security.gentoo.org/glsa/202007-52
ghostscript	www.ghostscript.com/cgi-bin/findgit.cgi
securityfocus	www.securityfocus.com/bid/108093

29 Nov 2022 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

CVSS 25

CVSS 37.5

EPSS0.00839