CVE-2016-9017

Name: CVE-2016-9017
Creator: NVD / NIST
Published: 2016-10-28T15:59:17.877+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.64%

Last modified Jun 17, 2026

CVE-2016-9017 is a vulnerability of currently unknown severity. Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsC_dumpfunction function in the jsdump.c component.. EPSS estimates a 1.64% chance of exploitation in the next 30 days.

Description

Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtain sensitive information by using the "opname in crafted JavaScript file" approach, related to an "Out-of-Bounds read" issue affecting the jsC_dumpfunction function in the jsdump.c component.

Metrics

EPSS Probability

1.64%

73.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Artifex	Mujs	<= 5c337af4b3df80cf967e4f9f6a21522de84b392a

References

http://bugs.ghostscript.com/show_bug.cgi?id=697171Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/94241Third Party Advisory, VDB Entry
http://bugs.ghostscript.com/show_bug.cgi?id=697171Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/94241Third Party Advisory, VDB Entry

Timeline

Published: Oct 28, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-9017?

How severe is CVE-2016-9017?

Severity scoring for CVE-2016-9017 is pending analysis. The EPSS model estimates a 1.64% probability of exploitation in the next 30 days.

How do I fix CVE-2016-9017?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-9017?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST