Design/Logic Flaw

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function JsiObjFree jsiObj.c:230. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

Design/Logic Flaw

Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexergetchar jsiLexer.c:9. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

Null pointer dereference

jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function JsiStrcmpDict jsiChar.c:121. The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77...

Code injection

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsiDumpFunctions jsiEval.c:567. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84...

CVE-2019-1010173

Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function JsiValueArrayIndex jsiValue.c:366. The attack vector is: executing crafted javascript code. The fixed version is: after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3...

CVE-2019-1010173

CVE-2019-1010173 affects Jsish 2.4.84 (2.0484). The vulnerability is a Reachable Assertion in Jsi_ValueArrayIndex (jsiValue.c:366) that can cause a denial of service when crafting JavaScript code is executed. The fixed version is available after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3. Ex...

CVE-2019-1010171

The CVE-2019-1010171 entry describes a vulnerability in Jsish 2.4.83/2.0483 where a null pointer dereference in the function jsi_DumpFunctions (jsiEval.c:567) can be triggered by executing crafted JavaScript code, leading to denial of service. The fixed version is 2.4.84. References in the provid...

CVE-2019-1010171

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsiDumpFunctions jsiEval.c:567. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84...

CVE-2019-1010170

Jsish 2.4.77/2.0477 is affected by a Use-After-Free vulnerability in Jsi_ObjFree (jsiObj.c:230). This can lead to denial of service when crafted JavaScript code is executed. Impact: availability degradation (partial) per CVE metrics. The fixed version is 2.4.78. No exploitation status or in-the-w...

CVE-2019-1010170

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function JsiObjFree jsiObj.c:230. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

CVE-2019-1010169

Jsish 2.4.77/2.0477 is affected by an out-of-bounds read in the lexer_getchar function (jsiLexer.c:9), causing denial of service when executing crafted JavaScript code. The fixed version is 2.4.78. This CVE is corroborated by multiple sources in the connected documents, which consistently identif...

CVE-2019-1010169

Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexergetchar jsiLexer.c:9. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

CVE-2019-1010162

The CVE-2019-1010162 entry affects jsish 2.4.74/2.0474, with a NULL pointer dereference in Jsi_StrcmpDict (jsiChar.c:121). The impact is denial of service, requiring the victim to execute crafted JavaScript code as the attack vector. The root cause is a NULL pointer dereference in the dictionary/...

CVE-2019-1010162

jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function JsiStrcmpDict jsiChar.c:121. The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77...

Jsish Buffer Overflow Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database . A buffer overflow vulnerability exists in the 'jsievalcode' function of the jsiEval.c file in Jsish versions 2.4.70 and 2.047. An attacker can exploit this vulnerability to cause a denial of service segmentation error and...

Jsish Denial of Service Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database . A denial of service vulnerability exists in JsiLogMsg jsiUtils.c:196 in Jsish version 2.4.67. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference and segmentation error...

CVE-2018-1000668

jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...

CVE-2018-1000663

jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...

CVE-2018-1000661

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...

CVE-2018-1000661

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...