high7.5
CVE-2015-9242
Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception.
Impact
Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ecstatic Project | Ecstatic | before 1.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.chromium.org/p/v8/issues/detail?id=4640
- https://github.com/jfhbrook/node-ecstatic/pull/179
- https://nodesecurity.io/advisories/64
- https://bugs.chromium.org/p/v8/issues/detail?id=4640
- https://github.com/jfhbrook/node-ecstatic/pull/179
- https://nodesecurity.io/advisories/64