PT-2017-7766 · Mujs · Mujs

Op7Ic · Published 2017-01-13 · Updated 2024-06-15 · CVE-2016-10141

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MuJS versions prior to fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045

Description An integer overflow issue was found in the regemit function in regexp.c. This issue can be triggered by a regular expression with nested repetition, potentially leading to code execution or a denial of service condition due to a buffer overflow.

Recommendations For versions prior to fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045, update to a version that includes the fix for this issue to prevent potential code execution or denial of service.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-10141

OESA-2022-1976

OPENSUSE-SU-2024:11068-1

ROSA-SA-2023-2261

Affected Products

Mujs

References · 35

• https://nvd.nist.gov/vuln/detail/CVE-2016-10141 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30974 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-9108 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-7506 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30975 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-5627 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-9136 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-5628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-7504 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10141 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11068-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2018-16648 · Note
• https://suse.com/security/cve/CVE-2017-5628 · Note