Mujs
by Artifex
Source repositories
CVEs (30)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-5759 | Med | 0.39 | 5.5 | 0.05 | Jan 24, 2018 | jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file. | ||
| CVE-2022-30975 | Med | 0.36 | 5.5 | 0.01 | May 18, 2022 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. | ||
| CVE-2022-30974 | Med | 0.36 | 5.5 | 0.01 | May 18, 2022 | compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413. | ||
| CVE-2021-33796 | Cri | 0.00 | 10.0 | 0.01 | Jul 7, 2023 | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. | ||
| CVE-2021-33797 | Cri | 0.00 | 9.8 | 0.01 | Apr 17, 2023 | Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d. | ||
| CVE-2022-44789 | Hig | 0.00 | 8.8 | 0.02 | Nov 23, 2022 | A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file. | ||
| CVE-2021-45005 | Cri | 0.00 | 9.8 | 0.01 | Feb 14, 2022 | Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. | ||
| CVE-2019-11413 | Hig | 0.00 | 7.5 | 0.02 | Apr 22, 2019 | An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check. | ||
| CVE-2019-11412 | Hig | 0.00 | 7.5 | 0.02 | Apr 22, 2019 | An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call. | ||
| CVE-2019-11411 | Cri | 0.00 | 9.8 | 0.03 | Apr 22, 2019 | An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow. |
- risk 0.39cvss 5.5epss 0.05
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.
- risk 0.36cvss 5.5epss 0.01
In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
- risk 0.36cvss 5.5epss 0.01
compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.
- risk 0.00cvss 10.0epss 0.01
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
- risk 0.00cvss 9.8epss 0.01
Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.
- risk 0.00cvss 8.8epss 0.02
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.
- risk 0.00cvss 9.8epss 0.01
Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements.
- risk 0.00cvss 7.5epss 0.02
An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check.
- risk 0.00cvss 7.5epss 0.02
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.
- risk 0.00cvss 9.8epss 0.03
An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow.
Page 2 of 2