Fedora 37 : mujs (2022-c4b56e4400)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c4b56e4400 advisory. - Fix CVE-2022-44789 rhbz2148261 - Fix CVE-2022-30975 rhbz2088596 - Fix CVE-2022-30974 rhbz2088591 Tenable has extracted the preceding description...

Fedora 38 : mujs (2022-142872d895)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-142872d895 advisory. Automatic update for mujs-1.3.2-1.fc38. Changelog Thu Dec 1 2022 Alain Vigne 1.3.2-1 - upstream release 1.3.2 - Fix CVE-2022-44789 rhbz2148261 - Fix...

GLSA-202405-06 : mujs: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-06 mujs: Multiple Vulnerabilities - Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. CVE-2021-45005 - compile in regexp.c in...

Fedora: Security Advisory for mujs (FEDORA-2022-c4b56e4400)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] [DSA 5291-1] mujs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5291-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 28, 2022 https://www.debian.org/security/faq -...

Debian DSA-5291-1 : mujs - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5291 advisory. Multiple security issues were discovered in MuJS, a lightweight JavaScript interpreter, which could result in denial of service and potentially the execution of...

CVE-2022-44789

A logical issue in OgetOwnPropertyDescriptor in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file...

CVE-2022-44789

A logical issue in OgetOwnPropertyDescriptor in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file...

CVE-2022-44789

The CVE-2022-44789 issue affects Artifex MuJS versions 1.0.0–1.3.x prior to 1.3.2, caused by a logical flaw in O_getOwnPropertyDescriptor() that can lead to Remote Code Execution via memory corruption when loading a crafted JavaScript file. Public references in Debian/Distro advisories and Gentoo...

Exploit for Out-of-bounds Write in Artifex Mujs

CVE-2022-44789 Files: Publi...