MU
Product
Mujs
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 18Medium 4Low 0
Watch
Add Mujs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-33797 | 9.8 | Apr 17 | Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1 Affected: 1.0.1 through 1.1.1 |
| CVE-2021-45005 | 9.8 | Feb 14 | Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements Affected: 1.1.3 |
| CVE-2019-12798 | 9.8 | Jun 13 | An issue was discovered in Artifex MuJS 1.0.5 Affected: 1.0.5 |
| CVE-2019-11411 | 9.8 | Apr 22 | An issue was discovered in Artifex MuJS 1.0.5 Affected: 1.0.5 |
| CVE-2016-10133 | 9.8 | Mar 24 | Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc Affected: All versions, or not specified |
| CVE-2016-10141 | 9.8 | Jan 13 | An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc Affected: before 2017-01-12 |
| CVE-2016-7505 | 9.8 | Oct 29 | A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc Affected: through a3a4fe840b80706c706e86160352af5936f292d8 |
| CVE-2016-7504 | 9.8 | Oct 29 | A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc Affected: through 5000749f5afe3b956fc916e407309de840997f4a |
| CVE-2022-44789 | 8.8 | Nov 23 | A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via… Affected: 1.0.0 before 1.3.2 |
| CVE-2020-24343 | 7.8 | Aug 13 | Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c Affected: through 1.0.7 |
| CVE-2017-5628 | 7.8 | Jan 30 | An issue was discovered in Artifex Software, Inc Affected: before 2017-01-24 |
| CVE-2017-5627 | 7.8 | Jan 30 | An issue was discovered in Artifex Software, Inc Affected: before 2017-01-24 |
| CVE-2021-33796 | 7.5 | Jul 7 | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service Affected: before 1.1.2 |
| CVE-2020-22886 | 7.5 | Jul 13 | Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service Affected: before 1.0.8 |
| CVE-2020-22885 | 7.5 | Jul 13 | Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service Affected: before 1.0.8 |
| CVE-2019-11413 | 7.5 | Apr 22 | An issue was discovered in Artifex MuJS 1.0.5 Affected: 1.0.5 |
| CVE-2019-11412 | 7.5 | Apr 22 | An issue was discovered in Artifex MuJS 1.0.5 Affected: 1.0.5 |
| CVE-2016-10132 | 7.5 | Mar 24 | regexp.c in Artifex Software, Inc Affected: All versions, or not specified |
| CVE-2016-9108 | 7.5 | Feb 3 | Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc Affected: through 2016-10-31 |
| CVE-2016-9109 | 7.5 | Jan 18 | Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape sequences Affected: All versions, or not specified |
| CVE-2016-7564 | 7.5 | Jan 18 | Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash) via crafted input Affected: All versions, or not specified |
| CVE-2016-7563 | 7.5 | Jan 18 | The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of the input Affected: All versions, or not specified |
| CVE-2016-9294 | 7.5 | Nov 12 | Artifex Software, Inc Affected: before 2016-10-26 |
| CVE-2016-9136 | 7.5 | Nov 3 | Artifex Software, Inc Affected: through 2016-10-31 |
| CVE-2016-7506 | 7.5 | Oct 29 | An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc Affected: through 8c805b4eb19cf2af689c860b77e6111d2ee439d5 |
| CVE-2016-9017 | 7.5 | Oct 28 | Artifex Software, Inc Affected: through 5c337af4b3df80cf967e4f9f6a21522de84b392a |
| CVE-2022-30975 | 5.5 | May 18 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp Affected: through 1.2.0 |
| CVE-2022-30974 | 5.5 | May 18 | compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413 Affected: through 1.2.0 |
| CVE-2018-6191 | 5.5 | Jan 24 | The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation Affected: through 1.0.2 |
| CVE-2018-5759 | 5.5 | Jan 24 | jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive… Affected: through 1.0.2 |
Showing 30