Stack Buffer Overflow in FastStone Image Viewer Affects Image Parsing
CVE-2022-36947

9.8CRITICAL

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
18 August 2022

What is CVE-2022-36947?

A stack buffer overflow vulnerability exists in FastStone Image Viewer 7.5 due to unsafe parsing of the tRNS chunk in PNG files. Exploitation of this weakness may allow an attacker to execute arbitrary code on the affected system, posing a significant risk to users. Proper validation and parsing of PNG files are essential to mitigate the potential for unauthorized access and system compromise.

References

https://www.faststone.org/FSViewerDetail.htm
x_refsource_MISC
https://wid.cert-bund.de/portal/wid/kurzinformationen
x_refsource_MISC
https://wid.cert-bund.de/portal/wid/securityadvisory?name...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.