PT-2023-12223 · Artifex · Artifex Mujs

Shaohuali · Published 2023-04-17 · Updated 2023-04-27 · CVE-2021-33797

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuJS versions 1.0.1 through 1.1.1

Description The issue is related to a buffer overflow in the jsdtoa.c file of Artifex MuJS. This occurs due to an integer overflow when the js strtod() function reads in a floating point exponent, leading to a buffer overflow in the pointer *d.

Recommendations For Artifex MuJS versions 1.0.1 through 1.1.1, consider updating to a version that fixes the buffer overflow issue in jsdtoa.c. As a temporary workaround, consider restricting the input to the js strtod() function to prevent integer overflows.

Exploit

Fix

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-119

Related Identifiers

CVE-2021-33797

Affected Products

Artifex Mujs

References · 10

• 🔥 https://github.com/ccxvii/mujs/issues/148 · Exploit
• https://github.com/ccxvii/mujs/commit/833b6f1672b4f2991a63c4d05318f0b84ef4d550 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-33797 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33797 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-33797 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-33797 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33797 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33797 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33797 · Vendor Advisory
• https://t.me/cvenotify/49144 · Telegram Post