{"id":"CVE-2017-5628","details":"An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.","modified":"2026-09-30T08:00:38.440300949Z","published":"2017-01-30T04:59:00.703Z","related":["openSUSE-SU-2024:11068-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2017-01-24"}],"source":"CPE_RANGE","vendor_product":"artifex:mujs"}]},"references":[{"type":"WEB","url":"http://git.ghostscript.com/?p=mujs.git%3Bh=8f62ea10a0af68e56d5c00720523ebcba13c2e6a"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/95855"},{"type":"REPORT","url":"https://bugs.ghostscript.com/show_bug.cgi?id=697496"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ccxvii/mujs","events":[{"introduced":"0"},{"fixed":"8f62ea10a0af68e56d5c00720523ebcba13c2e6a"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-5628.json","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/ccxvii/mujs/commit/8f62ea10a0af68e56d5c00720523ebcba13c2e6a","target":{"file":"jsdate.c"},"deprecated":false,"digest":{"line_hashes":["302338063589320777506656733934098694740","168914246480469680882378029224303936735","256653493518763499336265779728017327860","59515177325930289519458002516218188450","121817145195669859466740412724984179930","235964387829672882322383825213001374906","255037448926206480694799834336331042339","245703386097029334799162329722053937019"],"threshold":0.9},"id":"CVE-2017-5628-2c0e115a"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/ccxvii/mujs/commit/8f62ea10a0af68e56d5c00720523ebcba13c2e6a","target":{"file":"jsdate.c","function":"MakeDay"},"deprecated":false,"digest":{"length":501,"function_hash":"147080890961510823702327613709478672053"},"id":"CVE-2017-5628-89b8a5e3"}],"vanir_signatures_modified":"2026-09-30T08:00:38Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}