CVE-2016-7504 — Use After Free in Mujs

CWE-416 — Use After Free7 documents6 sources

Severity

9.8CRITICALNVD

EPSS

1.1%

top 22.25%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Artifex Mujs

Timeline

PublishedOct 29

Latest updateMay 17

Description

A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDartifex/mujs5000749f5afe3b956fc916e407309de840997f4a

🔴Vulnerability Details

GHSA

GHSA-fjq3-r85p-jv63: A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc↗2022-05-17

▶

OSV

CVE-2016-7504: A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc↗2016-10-29

▶

CVEList

CVE-2016-7504: A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc↗2016-10-29

▶

📋Vendor Advisories

Debian

CVE-2016-7504: mujs - A use-after-free vulnerability was observed in Rp_toString function of Artifex S...↗2016

▶

💬Community

Bugzilla

CVE-2016-7504 CVE-2016-7505 CVE-2016-7506 CVE-2016-9017 CVE-2016-9108 CVE-2016-9109 mujs: Multiple security issues↗2016-10-31

▶

Bugzilla

CVE-2016-7504 CVE-2016-7505 CVE-2016-7506 CVE-2016-9017 CVE-2016-9108 CVE-2016-9109 CVE-2016-9294 mujs: various flaws [fedora-all]↗2016-10-31

▶