VDB
CVE-2016-10132
CVE-2016-10132
PUBLISHED
CVSS 7.5 HIGH
regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regular expression compilation.
EPSS 2.16% · 81.5th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.16%
81.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| artifex | mujs | |
| fedoraproject | fedora | 25 |
| n/a | n/a | * |
Timeline
- Mar 24, 2017 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- FEDORA-2017-dc6023e849 vendor-advisory
- [oss-security] 20170112 Re: CVE Request: MUJS null pointer dereference and Heap buffer overflow write mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2016-10132 advisory
- https://bugs.ghostscript.com/show_bug.cgi?id=697381 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF url
- http://git.ghostscript.com/?p=mujs.git%3Bh=fd003eceda531e13fbdd1aeb6e9c73156496e569 url
- http://git.ghostscript.com/?p=mujs.git;h=fd003eceda531e13fbdd1aeb6e9c73156496e569 url
- http://www.openwall.com/lists/oss-security/2017/01/12/9 url