CVE-2019-11411

An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow.

• CWE-787

• http://www.ghostscript.com/cgi-bin/findgit.cgi?da632ca08f240590d2dec786722ed08486ce1be6Patch, Vendor Advisory
• http://www.securityfocus.com/bid/108093Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=700938Issue Tracking, Permissions Required, Vendor Advisory
• https://github.com/ccxvii/mujs/commit/da632ca08f240590d2dec786722ed08486ce1be6Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI/
• https://security.gentoo.org/glsa/202007-52
• http://www.ghostscript.com/cgi-bin/findgit.cgi?da632ca08f240590d2dec786722ed08486ce1be6Patch, Vendor Advisory
• http://www.securityfocus.com/bid/108093Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=700938Issue Tracking, Permissions Required, Vendor Advisory
• https://github.com/ccxvii/mujs/commit/da632ca08f240590d2dec786722ed08486ce1be6Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI/
• https://security.gentoo.org/glsa/202007-52

Published

Apr 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11406Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name…
• CVE-2019-11407app/operator_panel/index_inc.php in the Operator Panel modul…
• CVE-2019-11408XSS in app/operator_panel/index_inc.php in the Operator Pane…
• CVE-2019-11409app/operator_panel/exec.php in the Operator Panel module in …8.8
• CVE-2019-1141A remote code execution vulnerability exists in the way that…4.2
• CVE-2019-11410app/backup/index.php in the Backup Module in FusionPBX 4.4.3…
• CVE-2019-11412An issue was discovered in Artifex MuJS 1.0.5. jscompile.c c…7.5
• CVE-2019-11413An issue was discovered in Artifex MuJS 1.0.5. It has unlimi…
• CVE-2019-11414An issue was discovered on Intelbras IWR 3000N 1.5.0 devices…
• CVE-2019-11415An issue was discovered on Intelbras IWR 3000N 1.5.0 devices…
• CVE-2019-11416A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 dev…
• CVE-2019-11417system.cgi on TRENDnet TV-IP110WN cameras has a buffer overf…