CVE:CVE-2022-39381
CNNVD:CNNVD-202211-1924
MuhammaraJS是Julian Hille个人开发者的一个带有 c/cpp 绑定的节点模块。
MuhammaraJS 2.6.0之前版本存在安全漏洞。攻击者利用该漏洞通过特制的PDF文件导致拒绝服务。
solution:Upgrade muhammarajs_project muhammarajs to a higher version than 2.6.0,and avoid the version (,2.6.0]; Upgrade pdfhummus hummusjs to a higher version than 1.0.111,and avoid the version (,1.0.111)