First published: Thu Jun 13 2019(Updated: )
An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Artifex MuJS | =1.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-12798 refers to an issue discovered in Artifex MuJS 1.0.5 where the regcompx function in regexp.c does not restrict the size of regular expression programs, leading to an overflow of the parsed syntax list size.
The severity of CVE-2019-12798 is critical with a CVSS score of 9.8.
CVE-2019-12798 affects Artifex MuJS 1.0.5 by allowing an overflow of the parsed syntax list size due to the lack of restriction on regular expression program size.
To fix CVE-2019-12798, it is recommended to update Artifex MuJS to a version where the issue has been resolved.
More information about CVE-2019-12798 can be found at the following references: [link1](http://git.ghostscript.com/?p=mujs.git;h=7f50591861525f76e3ec7a63392656ff8c030af9), [link2](http://www.securityfocus.com/bid/108774).