CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements.
Configurations

Configuration 1 (hide)

cpe:2.3:a:artifex:mujs:1.1.3:*:*:*:*:*:*:*

History

22 Feb 2022, 20:37

Type Values Removed Values Added
References (MISC) https://bugs.ghostscript.com/show_bug.cgi?id=704749 - (MISC) https://bugs.ghostscript.com/show_bug.cgi?id=704749 - Permissions Required
References (MISC) https://github.com/ccxvii/mujs/commit/df8559e7bdbc6065276e786217eeee70f28fce66 - (MISC) https://github.com/ccxvii/mujs/commit/df8559e7bdbc6065276e786217eeee70f28fce66 - Patch, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 7.5
v3 : 9.8
CPE cpe:2.3:a:artifex:mujs:1.1.3:*:*:*:*:*:*:*
CWE CWE-787
First Time Artifex
Artifex mujs

14 Feb 2022, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-02-14 22:15

Updated : 2023-12-10 14:22


NVD link : CVE-2021-45005

Mitre link : CVE-2021-45005

CVE.ORG link : CVE-2021-45005


JSON object : View

Products Affected

artifex

  • mujs
CWE
CWE-787

Out-of-bounds Write