First published: Thu Sep 06 2018(Updated: )
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jsish Jsish | =2.4.70_2.047 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1000668 is considered a medium severity vulnerability due to its potential to cause a crash.
To fix CVE-2018-1000668, upgrade to a patched version of jsish that addresses the out-of-bounds read issue.
Exploiting CVE-2018-1000668 can lead to a crash of the software due to segmentation faults.
The vulnerability impacts users of jsish version 2.4.70_2.047.
CVE-2018-1000668 is caused by an out-of-bounds read vulnerability in the function jsi_ObjArrayLookup.