CVE-2016-9294 Null dereference in n/a

What is CVE-2016-9294?

CVE-2016-9294 is a high-severity vulnerability in n/a, published on 12 Nov 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (application crash)" attacks by using the "malformed labeled break/continue in JavaScript" approach, related to a "NULL pointer dereference" issue affecting the jscompile.c component.

Weakness: CWE-476

Which versions are affected by CVE-2016-9294?

It affects 1 product.

Products include Artifex Mujs.

How do I fix CVE-2016-9294?

No fix has been published for CVE-2016-9294 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-9294 being exploited?

There is no known exploitation of CVE-2016-9294 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-33796 Use after free in MuJS Critical 10.0
• CVE-2021-33797 Integer overflow in mujs Critical 9.8
• CVE-2021-45005 Memory corruption in n/a Critical 9.8
• CVE-2019-12798 Integer overflow in n/a Critical 9.8
• CVE-2019-11411 Memory corruption in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fv39-8gm8-9qg3.