git.ghostscript.com
http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1 CVE-2018-5759
MEDIUM
Artifex MuJS 1.0.2 - Integer Overflow
Record summary
CVE-2018-5759 has a selected CVSS score of 5.5 (medium); EIP currently links 1 catalogued exploit.
Description
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBArtifex MuJS 1.0.2 - Integer OverflowExploitDB exploitby Andrea SindoniNot analyzed1 file
References
6git.ghostscript.com
http://git.ghostscript.com/?p=mujs.git;a=commit;h=4d45a96e57fbabf00a7378b337d0ddcace6f38c1 102833vdb entry
http://www.securityfocus.com/bid/102833 bugs.ghostscript.com
https://bugs.ghostscript.com/show_bug.cgi?id=698868 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-5759 43904exploit
https://www.exploit-db.com/exploits/43904