CVE-2016-10141

Critical

Published: 13/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An integer overflow vulnerability was observed in the regemit function in regexp.c in MuJS by Artifex Software, Inc. It requires a regular expression with nested repetition, which can lead to code execution or a denial of service (buffer overflow) condition.

Risk Assessment

Exploitation of this vulnerability can lead to serious consequences, such as unauthorized code execution or service failure, jeopardizing the integrity and availability of the system.

Recommendation

It is recommended to update MuJS to the latest version to mitigate this vulnerability and to monitor the use of regular expressions in applications utilizing this library.

Original NVD description (English source)

An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.