CVE-2016-10141

Description

An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.

Overview

State

—

Assigner (CNA)

—

CVSS severity

MEDIUM

CVSS score

5.0 / 10

CVSS vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Effective score

5.0 / 10 MEDIUM source: CNA overview

CWE(s)

—

Reserved

—

Published

2017-01-13 00:00 UTC

Last updated

—

Source

https://www.rapid7.com/db/vulnerabilities/suse-cve-2016-10141/

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2017-01-13 09:59:00 UTC

NVD last modified

2026-06-17 00:39:08 UTC

NVD CVSS v3.1

9.8 / 10 CRITICAL source: nvd@nist.gov

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

3.9 / 10

Impact subscore

5.9 / 10

EPSS score

0.0365 (probability of exploitation in next 30 days)

EPSS percentile

88.43% vs all CVEs — higher = more likely to be exploited, as of 2026-07-29

NVD-assigned CWE(s): CWE-190 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2016-1330

Assigner

mitre

Published

Jan 13, 2017, 9:00:00 AM

Updated

Aug 6, 2024, 3:14:42 AM

EUVD-reported EPSS

3.6500

Vendors

n/a

Products

n/a (n/a)

Aliases

GHSA-6j4g-3pfp-hgj5

ENISA description: An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

MITRE references (3) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

• http://git.ghostscript.com/?p=mujs.git%3Bh=fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045 x_refsource_CONFIRM
• 95876 vdb-entry, x_refsource_BID
• https://bugs.ghostscript.com/show_bug.cgi?id=697448 x_refsource_CONFIRM

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

• SP 800-40 Rev. 4, Guide to Enterprise Patch Management Planning ...
  web:csrc.nist.gov

  Enterprise patch management is the process of identifying, prioritizing, acquiring, installing, and verifying the installation of patches, updates, and upgrades throughout an organization. Patching is more important than ever because of the increasing reliance on technology, but there is often a divide between business/mission owners and security/technology management about the value of ...

  2026-06-04 00:19 UTC
• ‎Google Gemini
  web:gemini.google.com

  Meet Gemini, Google's AI assistant. Get help with writing, planning, brainstorming, and more. Experience the power of generative AI.

  2026-06-04 00:19 UTC
• GitHub - fabianosrc/TermsrvPatcher: Patch termsrv.dll so that multiple ...
  web:github.com

  Patch termsrv.dll so that multiple remote users can open an RDP session on a non-Windows Server computer - fabianosrc/TermsrvPatcher

  2026-06-04 00:19 UTC
• Patch Compliance and Remediation: Technical Guide for IT Pros - JumpCloud
  web:jumpcloud.com

  Master patch compliance with this technical guide covering vulnerability scanning, deployment processes, key metrics, and remediation best practices.

  2026-06-04 00:19 UTC
• Patch Tuesday, May 2026 Edition - Krebs on Security
  web:krebsonsecurity.com

  Microsoft expects that exploitation is more likely. May's Patch Tuesday is a welcome respite from April, which saw Microsoft fix a near-record 167 security flaws.

  2026-06-04 00:19 UTC
• Vulnerability Patching: Why It's Critical & How to Do It Right
  web:tuxcare.com

  It includes discovering vulnerabilities, evaluating their potential impact, prioritizing remediation efforts (including patching), and confirming the fixes. Patch Management Patch management, on the other hand, is the act of applying the necessary updates to fix known vulnerabilities. It's a critical component of vulnerability management.

  2026-06-04 00:19 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-06-04 00:19 UTC
• When you shouldn't patch: Managing your risk factors - IBM
  web:www.ibm.com

  When you shouldn't patch : Managing your risk factors Overview Knowing your risk factor How to prioritize your organization's vulnerabilities When to slow down the patching process Cybersecurity insurance and patching To patch or not to patch ?

  2026-06-04 00:19 UTC
• Software Patching Best Practices: Don't Skip Updates | Infosec
  web:www.infosecinstitute.com

  You can treat vulnerabilities in three ways: Remediate: Apply the patch or update to the software or system, so it's safe from exploitation. Mitigate: If remediation isn't an option because there is no patch or there are issues in updating the applications, then you move to mitigate.

  2026-06-04 00:19 UTC
• Security Update for Microsoft Office 2016 (KB5002713)
  web:www.microsoft.com

  A security vulnerability exists in Microsoft Office 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.

  2026-06-04 00:19 UTC

Only Available for Registered Users. Sign in to view.