What’s Vulnerable › Vulnerabilities

CVE-2018-5759

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-24 · updated 2026-06-17
• Weakness: CWE-674

Description

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.

Affected products

• MuJS: through 1.0.2

References

• http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1
• http://www.securityfocus.com/bid/102833
• https://bugs.ghostscript.com/show_bug.cgi?id=698868
• https://www.exploit-db.com/exploits/43904/
• http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1
• http://www.securityfocus.com/bid/102833
• https://bugs.ghostscript.com/show_bug.cgi?id=698868
• https://www.exploit-db.com/exploits/43904/

Get alerted when CVE-2018-5759 or the next vulnerability affects your stack