Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

jsish can crash, causing service outage

CVE-2019-1010162 · published 7 years ago
Summary

The jsish version 2.4.74 can stop working when specially crafted JavaScript is run, leading to a denial of service. This happens because the program tries to use a missing value in its string comparison routine. Upgrade to version 2.4.77 or later to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
jsish jsish 2.4.77_2.0477
cpe:2.3:a:jsish:jsish:2.4.77_2.0477:*:*:*:*:*:*:*
Original advisory text
jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (jsiChar.c:121). The attack vector is: The victim ...
jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (jsiChar.c:121). The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published23 Jul 2019
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2019-1010162 · NVD
Track software like this
Free during beta