Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-14749

Опубликовано: 26 сент. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jerryscript:jerryscript:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%
0.00824
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu логотип

CVE-2017-14749

CVSS3: 7.8
ubuntu
почти 8 лет назад

JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data.

debian логотип

CVE-2017-14749

CVSS3: 7.8
debian
почти 8 лет назад

JerryScript 1.0 allows remote attackers to cause a denial of service ( ...

github логотип

GHSA-28qj-36f6-4995

CVSS3: 7.8
github
больше 3 лет назад

JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data.

EPSS

Процентиль: 73%
0.00824
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119