Jsish 2.4.70 2.047
Approved changes feed: RSS · Atom
cpe:2.3:a:jsish:jsish:2.4.70_2.047:*:*:*:*:*:*:*
part: a version: 2.4.70_2.047 update: *
| Vendor | Jsish (2a52ebad-1cf0-5f12-947d-7df371b4579f) |
|---|---|
| Product | Jsish (c7131565-3feb-5f1e-a40a-abc153a25cc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pcmacdon/jsish |
purl2cpe | 2026-06-01 10:11:27.264586 |
pkg:sourceforge/jsish |
purl2cpe | 2026-06-01 10:11:27.264588 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1010177 |
vulnerable | 2026-06-08 05:12:21.652656 |
Details available
Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d.
Published: 2019-07-24T11:52:20.000Z
Updated: 2024-08-05T03:07:18.412Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000668 |
vulnerable | 2026-06-08 05:10:25.957563 |
Details available
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.
Published: 2018-09-06T17:00:00.000Z
Updated: 2024-09-17T04:09:38.699Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000663 |
vulnerable | 2026-06-08 05:10:25.939277 |
Details available
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code.
Published: 2018-09-06T17:00:00.000Z
Updated: 2024-09-16T22:46:48.110Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.