Artifex MuJS Denial of Service Vulnerability

Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, which is used to embed into other software to provide script execution. A security vulnerability exists in the jsparse.c file in Artifex MuJS 1.0.2 and earlier versions, which stems from the program failing to properly...

Artifex MuJS 'js_strtod' function integer overflow vulnerability

Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, which is used to embed into other software to provide script execution. An integer overflow vulnerability exists in the 'jsstrtod' function of the jsdtoa.c file in Artifex MuJS 1.0.2 and earlier versions, which stems from...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

Design/Logic Flaw

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-6191

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

Integer overflow

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

CVE-2018-6191

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

CVE-2018-5759 affects Artifex MuJS, up to version 1.0.2, where the parser (jsparse.c) does not correctly maintain the AST depth for binary expressions. This can enable a remote attacker to trigger excessive recursion and cause a denial of service. Public references (Exploit-DB) describe a DoS PoC...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-6191

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

CVE-2018-6191

MuJS up to version 1.0.2 contains an integer overflow in js_strtod (jsdtoa.c) due to incorrect exponent validation. This affects Artifex MuJS when parsing numbers and can lead to a crash/DoS (as shown by Exploit-DB tooling). Connected documents indicate the issue was fixed in commit 25821e6d74fab...

CVE-2018-6191

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

CVE-2018-6191

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

PT-2018-17131

Name of the Vulnerable Software and Affected Versions: Artifex MuJS versions 1.0.2 and earlier Description: The issue is related to the improper maintenance of the AST depth for binary expressions in jsparse.c, which can be exploited by remote attackers to cause a denial of service through...

CVE-2018-5759: Uncontrolled Recursion

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

CVE-2018-6191: Integer Overflow or Wraparound

The jsstrtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation...

PT-2018-17396

Name of the Vulnerable Software and Affected Versions Artifex MuJS versions prior to 1.0.3 Description The issue is related to an integer overflow in the js strtod function due to incorrect exponent validation. Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resol...