Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish version v3.5.0, which stems from a heap-based buffer overflow in jsiEvalCodeSub in src/jsiEval.c. An attacker could exploit this vulnerability to potentially cause a denial of servic...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages and could lead to a denial of service DoS via a jsiValueObjDelete in src/jsiEval.c...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiClearStack in src/jsiEval.c...

jsish Jsi_ObjSetLength function buffer overflow vulnerability

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code...

CVE-2020-22873

Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code...

CVE-2020-22907

Stack overflow vulnerability in function jsievalcodesub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter...

CVE-2020-22907

Stack overflow vulnerability in function jsievalcodesub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter...

Integer overflow

Integer overflow vulnerability in function JsiObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code...

Stack overflow

Stack overflow vulnerability in function jsievalcodesub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter...

Buffer overflow

Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code...

CVE-2020-22907

CVE-2020-22907 affects the jsish interpreter: a stack overflow in the function jsi_evalcode_sub, present in jsish before 3.0.18. The vulnerability allows remote attackers to cause a Denial of Service by passing crafted data to the execute parameter. Several connected sources (Red Hat, NVD, PRION,...

CVE-2020-22907

Stack overflow vulnerability in function jsievalcodesub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter...

CVE-2020-22875

Jsish CVE-2020-22875 is a vulnerability in the Jsi_ObjSetLength function where an integer overflow in that function allows remote code execution. Affected is jsish versions before 3.0.6 (NVD) and variants cited as vulnerable before 3.0.8 (CNVD). The root cause is improper boundary checks in Jsi_O...

CVE-2020-22874

The CVE-2020-22874 entry concerns jsish, where the vulnerable component is the function Jsi_ObjArraySizer in the K runtime/library prior to version 3.0.8. The issue is described as an integer overflow in Jsi_ObjArraySizer, which can enable a remote attacker to execute arbitrary code. Multiple sou...

CVE-2020-22873

CVE-2020-22873 affects jsish up to version 3.0.7, where a buffer overflow in NumberToPrecisionCmd can allow remote code execution. Exploitation would occur via an attacker-supplied input to the affected function, with impact described as arbitrary code execution on the host. The known remediation...

Jsish 输入验证错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in jsish that stems from a buffer overflow vulnerability in the NumberToPrecisionCmd function in jshish before 3.0.7. Exploitation of this vulnerability allows remote attackers to execute...

Jsish 输入验证错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjArraySizer function to restrict integer data boundaries, allowing an attacker to execute arbitrary cod...

Jsish Resource Management Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database . A resource management error vulnerability exists in the 'jsiValueGetString' function jsiUtils.c file in Jsish version 2.4.84 2.0484. An attacker can exploit this vulnerability to cause a denial of service with the help of...

CVE-2019-1010172

Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString jsiUtils.c. The attack vector is: executing crafted javascript code. The fixed version is: after commit f3a8096e0ce44bbf36c1dcb6e603adf9c8670c39...