CVE-2016-10133

Опубликовано: 24 мар. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments to lightweight functions.

Ссылки

http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=77ab465f1c394bb77f00966cd950650f3f53cb24
http://www.openwall.com/lists/oss-security/2017/01/12/9
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/13/1
Mailing List
Patch
Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=697401
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF/
http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=77ab465f1c394bb77f00966cd950650f3f53cb24
http://www.openwall.com/lists/oss-security/2017/01/12/9
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/13/1
Mailing List
Patch
Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=697401
Issue Tracking
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02386

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-10133

CVSS3: 9.8

debian

больше 9 лет назад

Heap-based buffer overflow in the js_stackoverflow function in jsrun.c ...

GHSA-qh46-85gx-mhqj

CVSS3: 9.8

github

больше 4 лет назад

openSUSE-SU-2017:0373-1

suse-cvrf

больше 9 лет назад

Security update for mupdf

openSUSE-SU-2017:0369-1

suse-cvrf

больше 9 лет назад

Security update for mupdf

EPSS

Процентиль: 83%

0.02386

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119