464 matches found
CVE-2017-5628
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file...
CVE-2017-5627
The CVE-2017-5627 issue affects Artifex MuJS and is caused by jsR_setproperty not checking for a negative array length, leading to an integer overflow in js_pushstring when parsing a crafted JS file. The vulnerability is stated for MuJS versions before 4006739a28367c708dea19aeb19b8a1a9326ce08. Re...
CVE-2017-5627
An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsRsetproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the jspushstring function in jsrun.c when parsing a specially crafted JS...
CVE-2017-5628
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file...
CVE-2017-5628
CVE-2017-5628 affects Artifex MuJS prior to commit 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JavaScript file. This could impact robustness of parsing and, per the CVE desc...
CVE-2017-5627: Integer Overflow or Wraparound
An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsRsetproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the jspushstring function in jsrun.c when parsing a specially crafted JS...
PT-2017-16630
Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. MuJS versions prior to 8f62ea10a0af68e56d5c00720523ebcba13c2e6a Description An issue was discovered in the MakeDay function in jsdate.c, which does not validate the month. This leads to an integer overflow when parsing a...
CVE-2017-5628: Integer Overflow or Wraparound
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file...
PT-2017-16629
Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. MuJS versions prior to 4006739a28367c708dea19aeb19b8a1a9326ce08 Description The issue is related to the jsR setproperty function in jsrun.c, which lacks a check for a negative array length. This leads to an integer...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
CVE-2016-7564
Heap-based buffer overflow in the FptoString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service crash via crafted input...
Out-of-bounds
The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service out-of-bounds read via a asterisk at the end of the input...
CVE-2016-7564
Heap-based buffer overflow in the FptoString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service crash via crafted input...
CVE-2016-7563
The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service out-of-bounds read via a asterisk at the end of the input...
CVE-2016-7564
Heap-based buffer overflow in the FptoString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service crash via crafted input...
Code injection
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...
CVE-2016-7563
The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service out-of-bounds read via a asterisk at the end of the input...
Heap overflow
Heap-based buffer overflow in the FptoString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service crash via crafted input...
CVE-2016-9109
Artifex Software MuJS allows attackers to cause a denial of service crash via vectors related to incomplete escape sequences. NOTE: this vulnerability exists due to an incomplete fix for CVE-2016-7563...