PT-2017-7766 · Mujs · Mujs

Op7Ic · Publicado 2017-01-13 · Atualizado 2024-06-15 · CVE-2016-10141

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MuJS versions prior to fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045

Description An integer overflow issue was found in the regemit function in regexp.c. This issue can be triggered by a regular expression with nested repetition, potentially leading to code execution or a denial of service condition due to a buffer overflow.

Recommendations For versions prior to fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045, update to a version that includes the fix for this issue to prevent potential code execution or denial of service.

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-10141

OESA-2022-1976

OPENSUSE-SU-2024:11068-1

ROSA-SA-2023-2261

Produtos afetados

Mujs

Referências · 35

• https://suse.com/security/cve/CVE-2018-16648 · Nota
• https://suse.com/security/cve/CVE-2017-5628 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10141 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2022-30974 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-5896 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9108 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-7506 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-10141 · Nota
• https://bugs.ghostscript.com/show_bug.cgi?id=697448 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-30975 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-5627 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-15369 · Nota
• https://osv.dev/vulnerability/OESA-2022-1976 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-10132 · Nota
• https://suse.com/security/cve/CVE-2018-6544 · Nota