6.5

CVE-2018-1000661

EPSS 0.32%
Veröffentlicht 06.09.2018 17:29:01
Zuletzt bearbeitet 21.11.2024 03:40:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been fixed in 2.4.69.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Jsish ≫ Jsish Version2.4.67

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.32%	0.517

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://jsish.org/fossil/jsi/tktview/2adeb066894695b38309d92771aea11c8e0a56a8

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-1000661

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-1000661

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-1000661

EUVD