CVE-2017-10776: Buffer Overflow
Published Jul 5, 2017
·Updated
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll77df0000!LdrShutdownProcess+0x0000000000000130."
Affected Software
2 affected components
XnView xnview=2.40
Microsoft Windows
Event History
Jul 5, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-10776?
CVE-2017-10776 has been classified as high severity due to its potential to cause a denial of service.
2
How do I fix CVE-2017-10776?
To fix CVE-2017-10776, update XnView Classic to the latest version beyond 2.40 or apply security patches if available.
3
What types of files can trigger CVE-2017-10776?
CVE-2017-10776 can be triggered by maliciously crafted .rle files.
4
What impact does CVE-2017-10776 have on my system?
CVE-2017-10776 may result in a denial of service or other unspecified impacts on systems running XnView Classic 2.40.
5
Which versions of XnView are affected by CVE-2017-10776?
Only XnView Classic version 2.40 is known to be affected by CVE-2017-10776.