There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified other impact via a crafted js file.
References
Link | Resource |
---|---|
https://github.com/espruino/Espruino/issues/1587 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-12-18 01:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-20201
Mitre link : CVE-2018-20201
JSON object : View
CWE
CWE-125
Out-of-bounds Read
Products Affected
pur3
- espruino