VULNERABILITY INTELLIGENCE

CVE-2017-5628

CVSS score7.8 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2017-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references