CVE-2016-9136

Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a "Buffer Over-read" issue.

• CWE-119

• http://bugs.ghostscript.com/show_bug.cgi?id=697244Issue Tracking, Patch
• http://www.securityfocus.com/bid/94223Third Party Advisory, VDB Entry
• http://bugs.ghostscript.com/show_bug.cgi?id=697244Issue Tracking, Patch
• http://www.securityfocus.com/bid/94223Third Party Advisory, VDB Entry

Published

Nov 3, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9129Revive Adserver before 3.2.3 suffers from Information Exposu…
• CVE-2016-9130Revive Adserver before 3.2.3 suffers from Persistent XSS. A …
• CVE-2016-9131named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-…7.5
• CVE-2016-9132In Botan 1.8.0 through 1.11.33, when decoding BER data an in…
• CVE-2016-9134Exponent CMS 2.3.9 suffers from a SQL injection vulnerabilit…
• CVE-2016-9135Exponent CMS 2.3.9 suffers from a SQL injection vulnerabilit…
• CVE-2016-9137Use-after-free vulnerability in the CURLFile implementation …
• CVE-2016-9138PHP through 5.6.27 and 7.x through 7.0.12 mishandles propert…
• CVE-2016-9139Cross-site scripting (XSS) vulnerability in Open Ticket Requ…
• CVE-2016-9140Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9141Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9142Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…