CVE-2016-7505Improper Restriction of Operations within the Bounds of a Memory Buffer in Mujs

Severity
9.8CRITICALNVD
EPSS
0.9%
top 24.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 29
Latest updateMay 17

Description

A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

NVDartifex/mujsa3a4fe840b80706c706e86160352af5936f292d8

Patches

🔴Vulnerability Details

3
GHSA
GHSA-2rpv-jjj3-r2m2: A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc2022-05-17
OSV
CVE-2016-7505: A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc2016-10-29
CVEList
CVE-2016-7505: A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc2016-10-29

📋Vendor Advisories

1
Debian
CVE-2016-7505: mujs - A buffer overflow vulnerability was observed in divby function of Artifex Softwa...2016

💬Community

2
Bugzilla
CVE-2016-7504 CVE-2016-7505 CVE-2016-7506 CVE-2016-9017 CVE-2016-9108 CVE-2016-9109 mujs: Multiple security issues2016-10-31
Bugzilla
CVE-2016-7504 CVE-2016-7505 CVE-2016-7506 CVE-2016-9017 CVE-2016-9108 CVE-2016-9109 CVE-2016-9294 mujs: various flaws [fedora-all]2016-10-31
CVE-2016-7505 — Artifex Mujs vulnerability | cvebase