User Mode Write Vulnerability in FastStone Image Viewer by FastStone
CVE-2018-11705

7.8HIGH

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
20 June 2018

What is CVE-2018-11705?

A vulnerability exists in FastStone Image Viewer 6.2 that can be exploited when a user opens a specially crafted malformed JPEG file. This improper handling triggers a User Mode Write Access Violation at memory address 0x00578cc4 within the FSViewer.exe process. Attackers exploiting this flaw could potentially cause a denial-of-service condition (DoS) or other unspecified impacts, compromising the application's stability and security.

References

https://github.com/MostafaSoliman/Security-Advisories/tre...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.