CVE-2018-1000668

概要

参考情報

• jsish.org/fossil/jsi/tktview · Patch

jsish のその他の脆弱性

• CVE-2025-65570緊急 9.8A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an “instanceof” expression uses an …
• CVE-2024-24189緊急 9.8Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.
• CVE-2024-24188緊急 9.8Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.
• CVE-2024-24186緊急 9.8Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c.
• CVE-2020-23260高 7.5An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsi…