CVE-2016-9136

HIGH

Artifex MuJS < 2016-10-31 - Buffer Over-read via Crafted JavaScript

Title source: llm
STIX 2.1

Description

Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a "Buffer Over-read" issue.

References (2)

Core 2
Core References
Issue Tracking, Patch x_refsource_confirm
http://bugs.ghostscript.com/show_bug.cgi?id=697244
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94223

Scores

CVSS v3 7.5
EPSS 0.0024
EPSS Percentile 46.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-119
Status published
Products (1)
artifex/mujs < 2016-10-31
Published Nov 03, 2016
Tracked Since Feb 18, 2026