CVE-2017-5627

Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. MuJS versions prior to 4006739a28367c708dea19aeb19b8a1a9326ce08

Description The issue is related to the jsR setproperty function in jsrun.c, which lacks a check for a negative array length. This leads to an integer overflow in the js pushstring function when parsing a specially crafted JS file.

Recommendations For versions prior to 4006739a28367c708dea19aeb19b8a1a9326ce08, consider updating to a version that includes the fix for this issue. As a temporary workaround, consider restricting the use of the jsR setproperty function until a patch is available.