User Mode Write Access Violation in FastStone Image Viewer
CVE-2018-11706

7.8HIGH

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
20 June 2018

What is CVE-2018-11706?

FastStone Image Viewer version 6.2 contains a vulnerability that allows attackers to trigger a User Mode Write Access Violation (AV) when a malformed JPEG file is opened. This vulnerability is triggered by mishandling specific user inputs through FSViewer.exe, leading to potential denial of service (DoS) and possibly other impacts that remain unspecified. Users are advised to take precautionary measures to mitigate risks associated with this vulnerability.

References

https://github.com/MostafaSoliman/Security-Advisories/tre...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.