63 matches found
CVE-2020-23321
CVE-2020-23321 is a documented heap-buffer-overflow in JerryScript 2.2.0, triggered by lit_read_code_unit_from_utf8 (lit-strings.c:431). The vulnerability affects JerryScript 2.2.0 and is assigned a high/critical severity in public feeds (NVD CVSSv3.1: 9.8, NETWORK attack, no authentication, impa...
CVE-2020-23321
Removed by vendor...
JerryScript 缓冲区错误漏洞
JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in litreadcodeunitfromutf8 in lit-strings.c:431 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
lit-product.com Cross Site Scripting vulnerability OBB-1226684
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-6418
Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to a heap-buffer-overflow in the lit read code unit from utf8 function of the lit-strings.c component in JerryScript. This can allow a remote attacker to access confidential data,...
lit-product.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1141506 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lit-product.com website an...
JerryScript Buffer Overflow Vulnerability (CNVD-2019-24567)
JerryScript is a lightweight JavaScript engine . The 'litchartoutf8bytes' function in JerryScript commit version 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 jerry-core/lit/lit -char-helpers.c file is vulnerable to a buffer overflow. The vulnerability stems from a networked system or product performi...
UBUNTU-CVE-2019-1010176
JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function litchartoutf8bytes jerry-core/lit/lit-char-helpers.c:377. The attack vector is: executing crafted...
PT-2019-11495
Name of the Vulnerable Software and Affected Versions: JerryScript versions prior to the version after commit 505dace719aebb3308a3af223cfaa985159efae0 Description: The issue is related to a buffer overflow, which can lead to denial of service and possibly arbitrary code execution. This occurs whe...
PT-2018-10560
Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description An issue was discovered in JerryScript, where a heap-based buffer over-read occurs in the lit read code unit from utf8 function. This is related to the re parse char class function in re-parser.c and can be...
PT-2018-10561
Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description An issue was discovered in the lit read code unit from hex function, which is related to the re parse char class in parser/regexp/re-parser.c. This issue involves a heap-based buffer over-read via a RegExp"u...
lit-p.com XSS vulnerability
Open Bug Bounty ID: OBB-596790 Description| Value ---|--- Affected Website:| lit-p.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
JerryScript Buffer Overflow Vulnerability
JerryScript is a lightweight JavaScript engine . The 'litreadcodeunitfromhex' function in the file lit/lit-char-helpers.c in JerryScript has a heap buffer out-of-bounds read. An attacker could exploit this vulnerability to cause a buffer overflow...
CVE-2017-18212
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...
PT-2018-6740
Name of the Vulnerable Software and Affected Versions: JerryScript version 1.0 Description: An issue was discovered in the lit read code unit from hex function in lit/lit-char-helpers.c, which can be exploited via a RegExp"x0" payload, resulting in a heap-based buffer over-read. Recommendations:...
lit-info.ru XSS vulnerability
Vulnerable URL: http://www.lit-info.ru/shop/book/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 641272 VIP website status:| No Check lit-info.ru SSL connection:| Grade: F...
Vulnerabilities in Microsoft Reader and HIS
Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader1-adv.tx...
Microsoft Reader 2.1.1.3143 - Integer Overflow (2)
Microsoft Reader 2.1.1.3143 - Integer Overflow 2 Source: http://aluigi.org/adv/msreader3-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: = 2.1.1.3143 PC version = 2.6.1.7169 Origami version the non-PC versions have not been tested Platforms: Windows,...
Microsoft Reader 2.1.1.3143 - Integer Overflow (1)
Source: http://aluigi.org/adv/msreader1-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: 8B7B 68 MOV EDI,DWORD PTR DS:EBX+68 01083071 |. 8BF7 MOV ESI,EDI 01083073 |. C1E6 04 SHL ESI,4 01083076 |. 837D 08 00...
Solaris 2.6 (sparc) : 104829-02
The remote host is missing Sun Security Patch number 104829-02 FLEXlm 4.1c: Patch for FLEXlm 4.1c and lit/littty. Date this patch was last updated by Sun : Thu Dec 23 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...