CVE-2016-7506

CVE-2016-7506 affects Artifex MuJS (MuJS) with an out-of-bounds read in the Sp_replace_regexp function, prior to version 5000749f5afe3b956fc916e407309de840997f4a. Exploitation could lead to code execution or a denial-of-service condition. The provided connected documents confirm MuJS as the affec...

CVE-2016-7504

A use-after-free vulnerability was observed in RptoString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition...

CVE-2016-7505

Artifex MuJS contains a buffer overflow in the divby function prior to commit 8c805b4eb19cf2af689c860b77e6111d2ee439d5. Successful exploitation can lead to code execution or denial of service. Mitigation is to upgrade MuJS to a version containing the patch (post-commit 8c805b4e…).

CVE-2016-7504: Use After Free

A use-after-free vulnerability was observed in RptoString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition...

PT-2016-7354

Name of the Vulnerable Software and Affected Versions MuJS versions prior to 5000749f5afe3b956fc916e407309de840997f4a Description An out-of-bounds read issue was found in the Sp replace regexp function, potentially leading to code execution or a denial of service condition. Recommendations For...

PT-2016-7352

Name of the Vulnerable Software and Affected Versions MuJS versions prior to 5c337af4b3df80cf967e4f9f6a21522de84b392a Description A use-after-free issue was found in the Rp toString function, which can be exploited to achieve code execution or cause a denial of service condition. Recommendations...

PT-2016-7353

Name of the Vulnerable Software and Affected Versions MuJS versions prior to 8c805b4eb19cf2af689c860b77e6111d2ee439d5 Description A buffer overflow issue was found in the divby function, which can be exploited to achieve code execution or cause a denial of service condition. Recommendations For...

CVE-2016-7505: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition...

CVE-2016-7506: Out-of-bounds Read

An out-of-bounds read vulnerability was observed in Spreplaceregexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A successful exploitation of this issue can lead to code execution or denial of service condition...

CVE-2016-9017

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

CVE-2016-9017

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

Design/Logic Flaw

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

CVE-2016-9017

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

CVE-2016-9017

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

CVE-2016-9017

MuJS (Artifex Software, Inc.) before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 is affected by CVE-2016-9017, which enables context-dependent attackers to obtain sensitive information via an Out-of-Bounds read in the jsC_dumpfunction in jsdump.c. The connected OSV entry explicitly lists CVE-2016-90...

CVE-2016-9017

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

PT-2016-7621

Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. MuJS versions before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 Description The issue allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to...

CVE-2016-9017: Out-of-bounds Read

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsCdumpfunction function in the jsdump.c...

Fedora 23 : mujs / zathura-pdf-mupdf (2016-1b9d24c2b6)

Security fix for CVE-2016-7563, CVE-2016-7564 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : mujs / zathura-pdf-mupdf (2016-c75bdc394a)

Security fix for CVE-2016-7563, CVE-2016-7564 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...