Description
Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments to lightweight functions.
References
- [oss-security] 20170112 Re: CVE Request: MUJS null pointer dereference and Heap buffer overflow write mailing-list
- FEDORA-2017-dc6023e849 vendor-advisory
- [oss-security] 20170112 CVE Request: MUJS null pointer dereference and Heap buffer overflow write mailing-list
- http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=77ab465f1c394bb77f00966cd950650f3f53cb24
- https://bugs.ghostscript.com/show_bug.cgi?id=697401