Background mujs is an embeddable Javascript interpreter in C. Description Multiple vulnerabilities have been discovered in mujs. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround...

Artifex Software MuJS Resource Management Error Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A resource management error vulnerability exists in Artifex Software MuJS version 1.0.5. The vulnerability stems from...

Exploit for Inadequate Encryption Strength in Primetek Primefaces

CVE-2017-1000486 Proof of Concept Exploit for PrimeFaces 5.x...

[SECURITY] Fedora 26 Update: mujs-0-11.20180129git25821e6.fc26

MuJS is a lightweight Javascript interpreter designed for embedding in other software to extend them with scripting capabilities...

Microsoft Edge JavaScript Interpreter Code Execution

The vulnerability of Microsoft Edge’s JavaScript interpreter is related to improper handling of objects in memory when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, resulting from memory corruption caused b...

Microsoft Edge JavaScript Interpreter Code Execution

The vulnerability of Microsoft Edge’s JavaScript interpreter is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge JavaScript Interpreter Code Execution

The vulnerability of Microsoft Edge’s JavaScript interpreter is related to improper handling of objects in memory when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, resulting from memory corruption caused b...

Browser security beyond sandboxing

Security is now a strong differentiator in picking the right browser. We all use browsers for day-to-day activities like staying in touch with loved ones, but also for editing sensitive private and corporate documents, and even managing our financial assets. A single compromise through a web...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability(CVE-2017-11809)

Here's a snippet of the method that interprets a javascript function's bytecode. Js::Var Js::InterpreterStackFrame::INTERPRETERLOOPNAME PROBESTACKscriptContext, Js::Constants::MinStackInterpreter; closureInitDone Assertthis-mreader.GetCurrentOffset == 0; this-InitializeClosures; DoStackScopeSlots...

PT-2017-2957

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to incorrect handling of objects in memory by the JavaScript interpreter in Microsoft Edge when rendering content. This can lead to memory corruption, allowing a...

PT-2017-2958

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the JavaScript interpreter in Microsoft Edge when rendering content. This could allow a remote attacker to execut...

PT-2017-2977

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the incorrect handling of objects in memory by the JavaScript interpreter in Microsoft Edge. This could allow a remote attacker to execute arbitrary code in the...

Emergency Update Patches Zero Day in Microsoft Malware Protection Engine

Microsoft made quick work of what two prominent Google researchers called the worst Windows vulnerability in recent memory, releasing an emergency patch Monday night, 48 hours after Google’s private disclosure was made. The mystery Windows zero day CVE-2017-0290 was in the Microsoft Malware...

Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5 MsMpEng is the Malware Protection service that is enabled by default on Windows 8, 8.1, 10, Windows Server 2012, and so on. Additionally, Microsoft Security Essentials, System Centre Endpoint Protection and various othe...

Artifex Software MuJS Buffer Overflow Vulnerability (CNVD-2017-05278)

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A buffer overflow vulnerability exists in the 'jsstackoverflow' function of the jsrun.c file in Artifex Software MuJS. An...

[SECURITY] Fedora 25 Update: mujs-0-6.20161031gita0ceaf5.fc25

MuJS is a lightweight Javascript interpreter designed for embedding in other software to extend them with scripting capabilities...

Artifex MuJS Heap Buffer Overflow Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. Artifex MuJS heap buffer overflow vulnerability. An attacker can exploit the vulnerability to execute arbitrary code in th...

MuJS heap buffer overflow vulnerability (CNVD-2016-08688)

MuJS is a lightweight JavaScript interpreter , it is used to embedded in other software to provide script execution capabilities . A heap buffer overflow vulnerability exists in MuJS. An attacker could exploit this vulnerability to execute arbitrary code in the context of an application, which...

Security update for polkit (important)

Polkit was updated to 0.113 to fix four security issues. The following vulnerabilities were fixed: CVE-2015-4625: a local privilege escalation due to predictable authentication session cookie values. boo935119 CVE-2015-3256: various memory corruption vulnerabilities in use of the JavaScript...

Mozilla Firefox 3.5 - 'escape()' Return Value Memory Corruption (Metasploit)

$Id: firefoxescaperetval.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...