Lucene search
+L

2 matches found

CNVD
CNVD
•added 2017/06/02 12:00 a.m.•20 views

JerryScript Denial of Service Vulnerability

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in the 'lexerprocesscharliteral' function in the jerry-core/parser/js/js-lexer.c file in JerryScript version 1.0, which stems from the failure of a program to properly allocate memory. An attacker can exploit this...

7.5CVSS6.7AI score0.02495EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2017/05/28 12:00 a.m.•8 views

PT-2017-18806

Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description The issue is related to the lexer process char literal function in JerryScript, which does not handle memory allocation for empty strings correctly. This can be exploited by remote attackers using malformed...

7.5CVSS0.02495EPSS
SaveExploits1References6
Rows per page
Query Builder