CVE-2019-12798: Critical severity mujs vulnerability

Published Jun 13, 2019

Updated

An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.

Affected Software

1 affected component

Artifex MuJS=1.0.5

Remediation

Patch Available

http://git.ghostscript.com/?p=mujs.git;h=7f50591861525f76e3ec7a63392656ff8c030af9

Event History

Jun 13, 2019

CVE Published

via MITRE·04:58 PM

Data Sourced

via MITRE·04:58 PM

Description

Frequently Asked Questions

What is CVE-2019-12798?

CVE-2019-12798 refers to an issue discovered in Artifex MuJS 1.0.5 where the regcompx function in regexp.c does not restrict the size of regular expression programs, leading to an overflow of the parsed syntax list size.

What is the severity of CVE-2019-12798?

The severity of CVE-2019-12798 is critical with a CVSS score of 9.8.

How does CVE-2019-12798 affect Artifex MuJS 1.0.5?

CVE-2019-12798 affects Artifex MuJS 1.0.5 by allowing an overflow of the parsed syntax list size due to the lack of restriction on regular expression program size.

How can I fix CVE-2019-12798?

To fix CVE-2019-12798, it is recommended to update Artifex MuJS to a version where the issue has been resolved.

Where can I find more information about CVE-2019-12798?

More information about CVE-2019-12798 can be found at the following references: [link1](http://git.ghostscript.com/?p=mujs.git;h=7f50591861525f76e3ec7a63392656ff8c030af9), [link2](http://www.securityfocus.com/bid/108774).