CVEs-PoC/2018/CVE-2018-6191.md

CVE-2018-6191

Description

The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.

POC

Reference

• https://bugs.ghostscript.com/show_bug.cgi?id=698920
• https://bugs.ghostscript.com/show_bug.cgi?id=698920
• https://www.exploit-db.com/exploits/43903/
• https://www.exploit-db.com/exploits/43903/

Github

• https://github.com/invictus1306/advisories