CVE-2018-11597

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:o:espruino:espruino:*:*:*:*:*:*:*:*

Information

Published : 2018-05-31 09:29

Updated : 2019-10-02 17:03


NVD link : CVE-2018-11597

Mitre link : CVE-2018-11597


JSON object : View

CWE
CWE-674

Uncontrolled Recursion

Advertisement

dedicated server usa

Products Affected

espruino

  • espruino