PT-2019-12949 · Artifex · Artifex Mujs

Published 2019-06-13 · Updated 2019-06-17 · CVE-2019-12798

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuJS version 1.0.5

Description An issue was discovered in Artifex MuJS where the regcompx function in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.

Recommendations For Artifex MuJS version 1.0.5, consider restricting the size of regular expressions to prevent overflows until a patch is available.

Fix

Weakness Enumeration

CWE-185

Related Identifiers

CVE-2019-12798

Affected Products

Artifex Mujs

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-12798 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12798 · Vendor Advisory
• http://securityfocus.com/bid/108774 · Note
• http://git.ghostscript.com/?p=mujs.git%3Bh=7f50591861525f76e3ec7a63392656ff8c030af9 · Note