CVE-2019-1010173

Published: Jul 23, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Jsi_ValueArrayIndex (jsiValue.c:366). The attack vector is: executing crafted javascript code. The fixed version is: after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3.

Affected (1)

Products: Jsish: Jsish

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jsish Jsish	Version 2.4.84_2.0484

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (2)

https://jsish.org/fossil/jsi/tktview/b3278d1a441477d50363d28df79bbf58de2448af

Source: josh@bress.net

ExploitPatchVendor Advisory

https://jsish.org/fossil/jsi/tktview/b3278d1a441477d50363d28df79bbf58de2448af

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.