PT-2019-11487

Name of the Vulnerable Software and Affected Versions: jsish versions prior to 2.4.77 Description: The issue is related to a denial of service impact. It involves the Jsi StrcmpDict function in the jsiChar.c file at line 121. The attack vector requires the victim to execute crafted JavaScript cod...

CVE-2018-1000663

jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...

CVE-2018-1000661

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...

PT-2018-9520

Name of the Vulnerable Software and Affected Versions jsish versions 2.4.70 through 2.4.70 Description The issue is related to an out-of-bounds read in the jsi ObjArrayLookup function, located in jsiObj.c:274, which can cause a crash due to a segmentation fault. This can be exploited by executing...

PT-2018-9515

Name of the Vulnerable Software and Affected Versions jsish version 2.4.70 Description The issue is related to a Buffer Overflow in the jsi evalcode function from jsiEval.c, which can cause a Crash due to a segmentation fault. This can be exploited by executing crafted JavaScript code...