User Mode Write Vulnerability in FastStone Image Viewer by FastStone Soft
CVE-2018-11702

7.8HIGH

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
20 June 2018

What is CVE-2018-11702?

FastStone Image Viewer 6.2 contains a vulnerability that can be triggered by opening a specifically crafted malformed JPEG file. When this occurs, it leads to a User Mode Write Access Violation at the memory address 0x00578cb3, potentially causing a Denial of Service (DoS) or other unforeseen impacts. This issue underscores the importance of validating file inputs to prevent exploitation in various software environments.

References

https://github.com/MostafaSoliman/Security-Advisories/tre...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.