CVE-2016-9017 Information disclosure in n/a
Attackers can obtain sensitive information via out-of-bounds read in MuJS by crafting a malicious JavaScript file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9017?
CVE-2016-9017 is a high-severity vulnerability in n/a, published on 28 Oct 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsC_dumpfunction function in the jsdump.c component.
Which versions are affected by CVE-2016-9017?
It affects 1 product.
Products include Artifex Mujs.
How do I fix CVE-2016-9017?
Apply the vendor's patch.
Is CVE-2016-9017 being exploited?
There is no known exploitation of CVE-2016-9017 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-527p-fff3-w4mq.