CVE-2018-5759 - jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file

Back Back to CVE browser

MEDIUM

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file

Published Jan 24, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 5.06%

Description

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-674

References (5)

http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1
x_refsource_MISC
http://www.securityfocus.com/bid/102833
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugs.ghostscript.com/show_bug.cgi?id=698868
x_refsource_MISCPermissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-17528
Advisory
https://www.exploit-db.com/exploits/43904/
exploitx_refsource_EXPLOIT-DBPatchThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1		x_refsource_MISC
http://www.securityfocus.com/bid/102833		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugs.ghostscript.com/show_bug.cgi?id=698868		x_refsource_MISCPermissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-17528		Advisory
https://www.exploit-db.com/exploits/43904/		exploitx_refsource_EXPLOIT-DBPatchThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 24, 2018

Updated Aug 5, 2024

Reserved Jan 17, 2018

Link CVE-2018-5759

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-5759

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 24, 2018

Updated Aug 5, 2024

Link EUVD-2018-17528

GitHub

No data