CVE-2017-10752: Buffer Overflow

Published Jul 5, 2017

Updated

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."

Affected Software

2 affected components

XnView xnview=2.40

Microsoft Windows

Event History

Jul 5, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-10752?

CVE-2017-10752 is classified as a vulnerability that can lead to denial of service in XnView Classic version 2.40.

How do I fix CVE-2017-10752?

To mitigate CVE-2017-10752, it is recommended to upgrade to a newer version of XnView that addresses this vulnerability.

What types of attacks can CVE-2017-10752 enable?

CVE-2017-10752 can potentially enable denial of service attacks when processing a crafted .rle file.

Which version of XnView is affected by CVE-2017-10752?

XnView Classic version 2.40 is specifically affected by CVE-2017-10752.

What file type is associated with CVE-2017-10752?

CVE-2017-10752 is associated with a crafted .rle file that can exploit the vulnerability.