CVE-2022-44789

HIGH

Artifex MuJS 1.0.0-1.3.x - Remote Code Execution via Crafted JavaScript File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-44789. PoCs published by alalng.

AI-analyzed exploit summary This repository contains a working exploit for CVE-2022-44789, targeting a use-after-free vulnerability in MuJS. The exploit leverages heap manipulation and memory corruption to achieve remote code execution (RCE) by bypassing pointer mangling and executing shellcode.

Description

A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.

Exploits (1)

nomisec WORKING POC 12 stars

by alalng · poc

https://github.com/alalng/CVE-2022-44789

View Code ZIP pw:eip

This repository contains a working exploit for CVE-2022-44789, targeting a use-after-free vulnerability in MuJS. The exploit leverages heap manipulation and memory corruption to achieve remote code execution (RCE) by bypassing pointer mangling and executing shellcode.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: MuJS (specific version not explicitly stated)

No auth needed

Prerequisites: Vulnerable version of MuJS · Ability to execute JavaScript in the target environment

MITRE ATT&CK