Arbitrary Code Execution in Free Photo Viewer by Code610
CVE-2019-19468

7.8HIGH

Key Information:

Vendor

10-strike

Status
Free Photo Viewer
Vendor
CVE Published:
30 November 2019

What is CVE-2019-19468?

The Free Photo Viewer 1.3 is susceptible to a significant vulnerability that enables remote attackers to execute arbitrary code. This exploitation occurs when a specially crafted BMP or TIFF file is processed, which can trigger a malformed Structured Exception Handler (SEH) entry. Attackers leveraging this vulnerability can potentially gain unauthorized access and control over the affected system, emphasizing the importance of handling image files with caution.

References

https://code610.blogspot.com/2019/11/from-0-to-0day-quick...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.