CVE

Id
91122  
CVE No.
CVE-2016-4303  
Status
Candidate  
Description
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.  
Phase
Assigned (20160427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
783596 91122 CVE-2016-4303 MISC:http://blog.talosintel.com/2016/06/esnet-vulnerability.html  View
783597 91122 CVE-2016-4303 MISC:http://www.talosintelligence.com/reports/TALOS-2016-0164/  View
783598 91122 CVE-2016-4303 CONFIRM:http://software.es.net/iperf/news.html#security-issue-iperf-3-1-3-iperf-3-0-12-released  View
783599 91122 CVE-2016-4303 CONFIRM:https://github.com/esnet/iperf/commit/91f2fa59e8ed80dfbf400add0164ee0e508e412a  View
783600 91122 CVE-2016-4303 CONFIRM:https://raw.githubusercontent.com/esnet/security/master/cve-2016-4303/esnet-secadv-2016-0001.txt.asc  View
783601 91122 CVE-2016-4303 SUSE:openSUSE-SU-2016:2113  View
783602 91122 CVE-2016-4303 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00082.html  View
783603 91122 CVE-2016-4303 SUSE:openSUSE-SU-2016:2121  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3268 JVNDB-2016-004041 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 複数の Apple 製品の libxml2 には、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4616 91122 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004041.html  View