PT-2019-11491 · Jsish · Jsish

Publicado 2019-07-23 · Atualizado 2019-07-23 · CVE-2019-1010171

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Jsish version 2.4.83

Description: The issue is related to a null pointer dereference, which can cause a denial of service. It affects the jsi DumpFunctions function, located in jsiEval.c at line 567. The attack vector involves executing crafted JavaScript code.

Recommendations: For Jsish version 2.4.83, update to version 2.4.84 to resolve the issue. As a temporary workaround, consider avoiding the execution of crafted JavaScript code or restricting access to the jsi DumpFunctions function until the update is applied.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2019-1010171

Produtos afetados

Jsish

Referências · 3

• 🔥 https://jsish.org/fossil/jsi/tktview/a3026a7c06e0f41af461aa0bc2f7a7e886209390 · Exploit
• https://osv.dev/vulnerability/CVE-2019-1010171 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1010171 · Nota de Segurança