User Mode Write Vulnerability in FastStone Image Viewer by FastStone Soft
CVE-2018-15814

5.5MEDIUM

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
26 March 2019

What is CVE-2018-15814?

FastStone Image Viewer 6.5 is susceptible to a User Mode Write Access Violation (AV) due to improper handling of crafted image files. This vulnerability allows an attacker to manipulate image data, potentially leading to application crashes and data corruption. Exploiting this flaw may enable unauthorized access to sensitive information or execute arbitrary code, thus highlighting the importance of applying security patches and maintaining updated software.

References

https://0x00crashes.blogspot.com/2018/08/faststone-image-...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.