CVE-2018-1000663

CVE-2018-1000663 concerns jsish v2.4.70 (and 2.047) containing a buffer overflow in the _jsi_evalcode function of jsiEval.c, leading to a crash via segmentation fault. The vulnerability is exploitable when an attacker causes a victim to execute crafted JavaScript code. Public references in variou...

CVE-2018-1000668

Vulnerability detail (CVE-2018-1000668) : In jsish version 2.4.70 (2.047), an out-of-bounds read affects the function jsi_ObjArrayLookup (jsiObj.c:274), potentially causing a crash from a segmentation fault. The issue can be triggered when the victim executes crafted JavaScript code. A fix is ava...

CVE-2018-1000661

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...

CVE-2018-1000663

jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...

CVE-2018-1000661

Affected software: jsish. Vulnerable component: Jsi_LogMsg in jsiUtils.c (line 196). Issue: CWE-476 NULL pointer dereference in version 2.4.67 that can crash via specially crafted JavaScript execution. Impact: crash/segmentation fault as described; exploitation requires user-supplied JavaScript i...

CVE-2018-1000661: NULL Pointer Dereference

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...

CVE-2018-16648: Improper Validation of Array Index

In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...

CVE-2018-16647: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...

CVE-2018-1000668: Out-of-bounds Read

jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...

PT-2018-9520

Name of the Vulnerable Software and Affected Versions jsish versions 2.4.70 through 2.4.70 Description The issue is related to an out-of-bounds read in the jsi ObjArrayLookup function, located in jsiObj.c:274, which can cause a crash due to a segmentation fault. This can be exploited by executing...

CVE-2018-1000663: Improper Restriction of Operations within the Bounds of a Memory Buffer

jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...

PT-2018-13670

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.13.0 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by providing a crafted pdf file. This is due to an array-index underflow in the pdf dev alpha array in...

Debian DLA-1487-1 : libtirpc security update

CVE-2018-14622 Fix for egmentation fault due to pointer becoming NULL. For Debian 8 'Jessie', this problem has been fixed in version 0.2.5-1+deb8u2. We recommend that you upgrade your libtirpc packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the...

RHEL 7 : JBoss EAP (RHSA-2016:2054)

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.10 natives, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabili...

Apache Traffic Server Denial of Service Vulnerability (CNVD-2018-19519)

Apache Traffic Server ATS is the United States Apache Apache Software Foundation, an HTTP proxy and caching server. A security vulnerability exists in Apache ATS versions 6.0.0 through 6.2.2 and 7.0.0 through 7.1.3. An attacker could exploit the vulnerability by sending a specially crafted reques...

Apache Traffic Server Denial of Service Vulnerability (CNVD-2018-19517)

Apache Traffic Server ATS is the United States Apache Apache Software Foundation, an HTTP proxy and caching server. A security vulnerability exists in Apache ATS version 6.2.2. An attacker can exploit this vulnerability with a specially crafted invalid TLS handshake to cause a segmentation error...

Debian DLA-1482-1 : libx11 security update

Several issues were discovered in libx11, the client interface to the X Windows System. The functions XGetFontPath, XListExtensions, and XListFonts are vulnerable to an off-by-one override on malicious server responses. A malicious server could also send a reply in which the first string overflow...

Invalid Memory Address Dereference Vulnerability in libming 'decompileSingleArgBuiltInFunctionCall' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'decompileSingleArgBuiltInFunctionCall' function in version 0.4.8 of libming prior to 2018-03-12, which...

Design/Logic Flaw

An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-15871

An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...