medium5.5Public exploit code
CVE-2018-6191
The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Artifex MuJS 1.0.2 - Denial of Service2018-01-28 · dos · multiple
Impact
The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artifex | Mujs | through 1.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=25821e6d74fab5fcc200fe5e818362e03e114428
- http://www.securityfocus.com/bid/102840
- https://bugs.ghostscript.com/show_bug.cgi?id=698920
- https://www.exploit-db.com/exploits/43903/
- http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=25821e6d74fab5fcc200fe5e818362e03e114428
- http://www.securityfocus.com/bid/102840
- https://bugs.ghostscript.com/show_bug.cgi?id=698920
- https://www.exploit-db.com/exploits/43903/