CVE-2018-1000661

6.5MEDIUM

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable

发布于: 9/6/2018更新于: 11/21/2024
在NVD查看在MITRE查看

描述

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been fixed in 2.4.69.

AI分析AI驱动

受影响产品

jsishjsish
2.4.67

参考资料