CVE-2018-5759

published 2018-01-24

CVE-2018-5759: jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of…

medium 5.5 CVSS 3.0

AV L AC L PR N UI R S U C N I N A H

EXPLOIT

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
artifex	mujs	<= 1.0.2	—
debian	mujs	—	—

CWE-674