CVE-2016-10141

Critical

Description

An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.

SeverityCritical
CVSS9.8
Exploit probability—
ProductArtifex Mujs
PublishedJan 13, 2017
First seenJan 13, 2017

How to fix

Update
  • artifex mujs2017-01-12 or later

Affected products

ProductAffected versionsFixed in
artifex mujsv < 2017-01-122017-01-12

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.