CVE-2018-5759

Published: Jan 24, 2018Modified: Jun 17, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.

Affected (1)

Products: Artifex: Mujs

Artifex

1 product

Mujs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Artifex Mujs	Up to 1.0.2

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (8)

http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1

Source: cve@mitre.org

http://www.securityfocus.com/bid/102833

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugs.ghostscript.com/show_bug.cgi?id=698868

Source: cve@mitre.org

Permissions Required

https://www.exploit-db.com/exploits/43904/

Source: cve@mitre.org

ExploitPatchThird Party AdvisoryVDB Entry

http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/102833

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugs.ghostscript.com/show_bug.cgi?id=698868

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://www.exploit-db.com/exploits/43904/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party AdvisoryVDB Entry

Timeline

No history available yet.