CVE-2017-5628
High
Description
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.
SeverityHigh
CVSS7.8
Exploit probability—
ProductArtifex Mujs
PublishedJan 30, 2017
First seenJan 30, 2017
How to fix
Update
- artifex mujs2017-01-24 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artifex mujs | v < 2017-01-24 | 2017-01-24 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.