CVE-2021-45005: Buffer Overflow

Published Feb 14, 2022

Updated

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements.

Affected Software

1 affected component

Artifex MuJS=1.1.3

Remediation

Patch Available

https://github.com/ccxvii/mujs/commit/df8559e7bdbc6065276e786217eeee70f28fce66

Event History

Feb 14, 2022

CVE Published

via MITRE·09:47 PM

Data Sourced

via MITRE·09:47 PM

Description

Frequently Asked Questions

What is CVE-2021-45005?

CVE-2021-45005 is a vulnerability in Artifex MuJS v1.1.3 that allows a heap buffer overflow due to conflicting JumpList of nested try/finally statements.

How severe is CVE-2021-45005?

CVE-2021-45005 has a severity rating of 9.8, which is classified as critical.

How can I fix CVE-2021-45005?

To fix CVE-2021-45005, it is recommended to update to a patched version of Artifex MuJS that addresses the heap buffer overflow vulnerability.

Where can I find more information about CVE-2021-45005?

You can find more information about CVE-2021-45005 at the following references: <ul><li><a href='https://bugs.ghostscript.com/show_bug.cgi?id=704749'>https://bugs.ghostscript.com/show_bug.cgi?id=704749</a></li><li><a href='https://github.com/ccxvii/mujs/commit/df8559e7bdbc6065276e786217eeee70f28fce66'>https://github.com/ccxvii/mujs/commit/df8559e7bdbc6065276e786217eeee70f28fce66</a></li></ul>

What is the CWE ID for CVE-2021-45005?

The CWE ID for CVE-2021-45005 is CWE-119 and CWE-787.