2 matches found
CVE-2018-1000661
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...
CVE-2018-1000661
Affected software: jsish. Vulnerable component: Jsi_LogMsg in jsiUtils.c (line 196). Issue: CWE-476 NULL pointer dereference in version 2.4.67 that can crash via specially crafted JavaScript execution. Impact: crash/segmentation fault as described; exploitation requires user-supplied JavaScript i...