CVE-2016-9017: artifex mujs Out-of-bounds Read

Vulnerability summary

CVE-2016-9017 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in artifex mujs. EPSS estimates a 1.64% chance of exploitation in the next 30 days, higher than 76% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 28-10-2016
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsC_dumpfunction function in the jsdump.c component.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.
• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.