critical9.8
CVE-2016-10141
An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc.
Impact
An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artifex | Mujs | before 2017-01-12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.ghostscript.com/?p=mujs.git%3Bh=fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045
- http://www.securityfocus.com/bid/95876
- https://bugs.ghostscript.com/show_bug.cgi?id=697448
- http://git.ghostscript.com/?p=mujs.git%3Bh=fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045
- http://www.securityfocus.com/bid/95876
- https://bugs.ghostscript.com/show_bug.cgi?id=697448