PT-2019-12949 · Artifex · Artifex Mujs

Publicado 2019-06-13 · Atualizado 2019-06-17 · CVE-2019-12798

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuJS version 1.0.5

Description An issue was discovered in Artifex MuJS where the regcompx function in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.

Recommendations For Artifex MuJS version 1.0.5, consider restricting the size of regular expressions to prevent overflows until a patch is available.

Correção

Enumeração de Fraquezas

CWE-185

Identificadores relacionados

CVE-2019-12798

Produtos afetados

Artifex Mujs

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-12798 · Nota de Segurança
• http://securityfocus.com/bid/108774 · Nota
• http://git.ghostscript.com/?p=mujs.git%3Bh=7f50591861525f76e3ec7a63392656ff8c030af9 · Nota
• https://osv.dev/vulnerability/CVE-2019-12798 · Aviso do Fabricante