CPE Details
cJSON Project cJSON 1.7.8
1.7.8
2019-05-09
10h02 +00:00
10h02 +00:00
2019-05-09
10h02 +00:00
10h02 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:cjson_project:cjson:1.7.8:*:*:*:*:*:*:*
Informations
Vendor
cjson_projectProduct
cjsonVersion
1.7.8Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called. | 5.5 |
Moyen |
||
| DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The fixed version is: 1.7.9 and later. | 7.5 |
Haute |
||
| cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments. | 9.8 |
Critique |
||
| cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal. | 9.8 |
Critique |
