Out-of-bounds Read in Artifex Mujs

CVE-2016-7506

An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A successful exploitation of this issue can lead to code execution or denial of service condition.

Vulnerability class: Buffer Overflow

EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-7506?
CVE-2016-7506 is a high-severity vulnerability in Artifex Mujs, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2016-10-29.
How severe is CVE-2016-7506?
High severity. CVSS v3 base score is 7.5 out of 10.