CVE-2019-11412

概要

参考情報

• ghostscript.com/cgi-bin/findgit.cgi · Patch
• securityfocus.com/bid/108093 · Broken Link
• bugs.ghostscript.com/show_bug.cgi · Issue Tracking
• ccxvii/mujs commit 1e54790 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI
• security.gentoo.org/glsa/202007-52 · Third Party Advisory

mujs のその他の脆弱性

• CVE-2021-33796高 7.5In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
• CVE-2021-33797緊急 9.8Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point…
• CVE-2022-44789高 8.8A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code E…
• CVE-2022-30975中 5.5In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
• CVE-2022-30974中 5.5compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-20…