User Mode Write AV Vulnerability in FastStone Image Viewer by FastStone
CVE-2017-8826

7.8HIGH

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
5 July 2017

What is CVE-2017-8826?

FastStone Image Viewer 6.2 contains a User Mode Write AV vulnerability associated with the jpeg_mem_term function in libjpeg. This issue can be exploited through a specially crafted JPEG file, potentially leading to a denial of service (DoS) condition or other unspecified impacts. Attackers may leverage this vulnerability to disrupt normal operations of the FSViewer.exe process, highlighting the need for updated security measures.

References

https://github.com/wlinzi/security_advisories/tree/master...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.