Remote Code Execution Vulnerability in Artifex MuJS JavaScript Engine
CVE-2022-44789
8.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-44789?
A logical issue in the O_getOwnPropertyDescriptor() function within the Artifex MuJS JavaScript engine allows attackers to execute arbitrary code remotely. This vulnerability arises due to memory corruption when handling specially crafted JavaScript files, potentially compromising the integrity of applications utilizing this engine. Users are advised to upgrade to version 1.3.2 or later to mitigate the risk associated with this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.