Mujs
Vendor:
First CVE: Oct 28, 2016 · Active for 9 years
30
Total CVEs
More Total CVEs than 97% of tracked products
3.8
Avg CVEs / Year
Higher CVE frequency than 85% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 71% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mujs over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 28, 2016
9 years ago
Most Recent CVE
Jul 7, 2023
1,117 days ago
CVE Severity & Scoring
Mujs30 CVEs
13%
60%
27%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local7 (23.3%)
Network23 (76.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low30 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None22 (73.3%)
Unknown0 (0.0%)
Required8 (26.7%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None30 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (30 CVEs).
30 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-10141CRITICAL An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requir | Jan 13, 2017 | 9.8 | 32 | NO | NO |
CVE-2021-45005CRITICAL Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. | Feb 14, 2022 | 9.8 | 31 | NO | NO |
CVE-2018-6191MEDIUM The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. | Jan 24, 2018 | 5.5 | 31 | NO | YES |
CVE-2018-5759MEDIUM jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recur | Jan 24, 2018 | 5.5 | 31 | NO | YES |
CVE-2016-7504CRITICAL A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of thi | Oct 29, 2016 | 9.8 | 31 | NO | NO |
CVE-2021-33797CRITICAL Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overf | Apr 17, 2023 | 9.8 | 30 | NO | NO |
CVE-2019-11411CRITICAL An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow. | Apr 22, 2019 | 9.8 | 30 | NO | NO |
CVE-2022-44789HIGH A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via | Nov 23, 2022 | 8.8 | 29 | NO | NO |
CVE-2019-12798CRITICAL An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size. | Jun 13, 2019 | 9.8 | 29 | NO | NO |
CVE-2016-7505CRITICAL A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this iss | Oct 29, 2016 | 9.8 | 27 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (30 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
6.7% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (30 CVEs).
Media Mentions
Signals from CVEs in this product scope (30 CVEs).
Top CNAs Publishing CVEs For Mujs
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.1.3 | 1 | 9.8 | 1.5% | 0 | 0 |
| 1.0.5 | 4 | 8.7 | 2.3% | 0 | 0 |