CVE-2016-9294

Published Nov 12, 2016 CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed
Description
Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (application crash)" attacks by using the "malformed labeled break/continue in JavaScript" approach, related to a "NULL pointer dereference" issue affecting the jscompile.c component.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-10105 Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (application crash)" attacks by using the "malformed labeled break/continue in JavaScript" approach, related to a "NULL pointer dereference" issue affecting the jscompile.c component.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00636}

epss

{'score': 0.00491}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 2:42 AM
Reserved
Nov 11, 2016, 12:00 AM
Status
Modified
Published
Nov 12, 2016, 12:59 AM
Modified
Jun 17, 2026, 12:55 AM