CVE-2019-1010171

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsiDumpFunctions jsiEval.c:567. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84...

Null pointer dereference

jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function JsiStrcmpDict jsiChar.c:121. The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77...

Design/Logic Flaw

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function JsiObjFree jsiObj.c:230. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

Design/Logic Flaw

Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexergetchar jsiLexer.c:9. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

Code injection

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsiDumpFunctions jsiEval.c:567. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84...

CVE-2019-1010173

CVE-2019-1010173 affects Jsish 2.4.84 (2.0484). The vulnerability is a Reachable Assertion in Jsi_ValueArrayIndex (jsiValue.c:366) that can cause a denial of service when crafting JavaScript code is executed. The fixed version is available after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3. Ex...

CVE-2019-1010173

Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function JsiValueArrayIndex jsiValue.c:366. The attack vector is: executing crafted javascript code. The fixed version is: after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3...

CVE-2019-1010171

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsiDumpFunctions jsiEval.c:567. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84...

CVE-2019-1010171

The CVE-2019-1010171 entry describes a vulnerability in Jsish 2.4.83/2.0483 where a null pointer dereference in the function jsi_DumpFunctions (jsiEval.c:567) can be triggered by executing crafted JavaScript code, leading to denial of service. The fixed version is 2.4.84. References in the provid...

CVE-2019-1010170

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function JsiObjFree jsiObj.c:230. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

CVE-2019-1010170

Jsish 2.4.77/2.0477 is affected by a Use-After-Free vulnerability in Jsi_ObjFree (jsiObj.c:230). This can lead to denial of service when crafted JavaScript code is executed. Impact: availability degradation (partial) per CVE metrics. The fixed version is 2.4.78. No exploitation status or in-the-w...

CVE-2019-1010169

Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexergetchar jsiLexer.c:9. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...

CVE-2019-1010169

Jsish 2.4.77/2.0477 is affected by an out-of-bounds read in the lexer_getchar function (jsiLexer.c:9), causing denial of service when executing crafted JavaScript code. The fixed version is 2.4.78. This CVE is corroborated by multiple sources in the connected documents, which consistently identif...

CVE-2019-1010162

The CVE-2019-1010162 entry affects jsish 2.4.74/2.0474, with a NULL pointer dereference in Jsi_StrcmpDict (jsiChar.c:121). The impact is denial of service, requiring the victim to execute crafted JavaScript code as the attack vector. The root cause is a NULL pointer dereference in the dictionary/...

CVE-2019-1010162

jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function JsiStrcmpDict jsiChar.c:121. The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77...

PT-2019-11493

Name of the Vulnerable Software and Affected Versions: Jsish version 2.4.84 Description: The issue affects the Jsi ValueArrayIndex function in jsiValue.c at line 366, allowing for denial of service through crafted JavaScript code execution. Recommendations: For Jsish version 2.4.84, update to a...

PT-2019-11487

Name of the Vulnerable Software and Affected Versions: jsish versions prior to 2.4.77 Description: The issue is related to a denial of service impact. It involves the Jsi StrcmpDict function in the jsiChar.c file at line 121. The attack vector requires the victim to execute crafted JavaScript cod...

PT-2019-11489

Name of the Vulnerable Software and Affected Versions: Jsish version 2.4.77 Description: The issue is related to an out-of-bounds read, which can lead to a denial of service. It affects the lexer getchar function in the jsiLexer.c file. The attack vector involves executing crafted JavaScript code...

PT-2019-11490

Name of the Vulnerable Software and Affected Versions: Jsish version 2.4.77 Description: The issue is related to a Use After Free condition, which can lead to a denial of service. It affects the function Jsi ObjFree located in jsiObj.c:230. The attack vector involves executing crafted JavaScript...

PT-2019-11491

Name of the Vulnerable Software and Affected Versions: Jsish version 2.4.83 Description: The issue is related to a null pointer dereference, which can cause a denial of service. It affects the jsi DumpFunctions function, located in jsiEval.c at line 567. The attack vector involves executing craft...