489 matches found
CVE-2019-1010173: Reachable Assertion
Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function JsiValueArrayIndex jsiValue.c:366. The attack vector is: executing crafted javascript code. The fixed version is: after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3...
CVE-2019-1010171: NULL Pointer Dereference
Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsiDumpFunctions jsiEval.c:567. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84...
CVE-2019-1010162: NULL Pointer Dereference
jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function JsiStrcmpDict jsiChar.c:121. The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77...
CVE-2019-1010169: Out-of-bounds Read
Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexergetchar jsiLexer.c:9. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...
Jsish Denial of Service Vulnerability
Jsish is a small JavaScript parser written in C with a built-in database . A denial of service vulnerability exists in JsiLogMsg jsiUtils.c:196 in Jsish version 2.4.67. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference and segmentation error...
Jsish Buffer Overflow Vulnerability
Jsish is a small JavaScript parser written in C with a built-in database . A buffer overflow vulnerability exists in the 'jsievalcode' function of the jsiEval.c file in Jsish versions 2.4.70 and 2.047. An attacker can exploit this vulnerability to cause a denial of service segmentation error and...
CVE-2018-1000668
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...
CVE-2018-1000661
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...
CVE-2018-1000663
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...
CVE-2018-1000663
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...
CVE-2018-1000668
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...
CVE-2018-1000661
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...
Null pointer dereference
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...
Buffer overflow
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...
Out-of-bounds
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...
CVE-2018-1000661
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in JsiLogMsg jsiUtils.c:196 that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been...
CVE-2018-1000661
Affected software: jsish. Vulnerable component: Jsi_LogMsg in jsiUtils.c (line 196). Issue: CWE-476 NULL pointer dereference in version 2.4.67 that can crash via specially crafted JavaScript execution. Impact: crash/segmentation fault as described; exploitation requires user-supplied JavaScript i...
CVE-2018-1000663
CVE-2018-1000663 concerns jsish v2.4.70 (and 2.047) containing a buffer overflow in the _jsi_evalcode function of jsiEval.c, leading to a crash via segmentation fault. The vulnerability is exploitable when an attacker causes a victim to execute crafted JavaScript code. Public references in variou...
CVE-2018-1000668
Vulnerability detail (CVE-2018-1000668) : In jsish version 2.4.70 (2.047), an out-of-bounds read affects the function jsi_ObjArrayLookup (jsiObj.c:274), potentially causing a crash from a segmentation fault. The issue can be triggered when the victim executes crafted JavaScript code. A fix is ava...
CVE-2018-1000663
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...