PT-2016-7665

CVE-2016-9136

Published

2016-11-03

Updated

2022-09-30

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. MuJS versions before a0ceaf5050faf419401fe1b83acfa950ec8a8a89

Description The issue allows context-dependent attackers to obtain sensitive information by using the crafted JavaScript approach, related to a Buffer Over-read issue.

Recommendations For versions before a0ceaf5050faf419401fe1b83acfa950ec8a8a89, update to a version that includes the fix for this issue to prevent sensitive information disclosure.

Exploitability

Fix

Impacts

Researchers

Puzzor

Shi Ji

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2016-9136