Upstream information

CVE-2017-5628 at MITRE

Description

An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

SUSE Bugzilla entry: 1022504 [RESOLVED / FIXED]

SUSE Security Advisories:

    openSUSE-SU-2017:0504-1

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • mupdf >= 1.18.0-1.7
  • mupdf-devel-static >= 1.18.0-1.7
 Patchnames:
openSUSE-Tumbleweed-2024-11068

SUSE Timeline for this CVE

CVE page created: Mon Jan 30 09:15:45 2017
CVE page last modified: Mon Sep 9 15:27:08 2024