CVE-2018-5759

EPSS 5.2%

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/43904/unverified exploitdbwww.exploit-db.com/exploits/43904unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1 https://bugs.ghostscript.com/show_bug.cgi?id=698868 https://www.exploit-db.com/exploits/43904/http://www.securityfocus.com/bid/102833