First published: Tue Jul 13 2021(Updated: )
Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jsish Jsish | <3.0.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2020-22875.
The severity of CVE-2020-22875 is critical with a CVSS score of 9.8.
The affected software is Jsish version up to but not including 3.0.6.
CVE-2020-22875 is an integer overflow vulnerability in the function Jsi_ObjSetLength in Jsish, allowing remote attackers to execute arbitrary code.
Yes, a fix is available in Jsish version 3.0.6. It is recommended to update to this version to mitigate the vulnerability.