Denial of Service Vulnerability in MuJS by Artifex Software

CVE-2016-9294

What is CVE-2016-9294?

Artifex Software's MuJS JavaScript interpreter is susceptible to a vulnerability that enables context-dependent attackers to launch denial of service attacks. This is achieved through the use of malformed labeled break or continue statements in JavaScript, which leads to a NULL pointer dereference in the jscompile.c component, resulting in application crashes. Proper validation and sanitization of input data are critical to mitigate this security flaw.

References