CVE-2016-10133 Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments t...
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments to lightweight functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artifex mujs | All versions | No fix listed |
References
- git.ghostscript.com
- [oss-security] 20170112 CVE Request: MUJS null pointer dereference and Heap buffer overflow write mailing-list patch third-party-advisory
- [oss-security] 20170112 Re: CVE Request: MUJS null pointer dereference and Heap buffer overflow write mailing-list patch third-party-advisory
- bugs.ghostscript.com issue-tracking patch third-party-advisory
- FEDORA-2017-dc6023e849 vendor-advisory
- Debian Security Tracker CVE-2016-10133 vendor-advisory