CVE-2017-14279: Buffer Overflow
Published Sep 11, 2017
·Updated
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."
Affected Software
2 affected components
XnView xnview=2.40
Microsoft Windows
Event History
Sep 11, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14279?
CVE-2017-14279 is classified as a denial of service vulnerability.
2
How do I fix CVE-2017-14279?
To mitigate CVE-2017-14279, users should upgrade to a newer version of XnView Classic beyond 2.40.
3
What is the impact of CVE-2017-14279?
The impact of CVE-2017-14279 includes potential denial of service or unspecified other impacts when processing a crafted .jb2 file.
4
Which versions of XnView are affected by CVE-2017-14279?
CVE-2017-14279 specifically affects XnView Classic version 2.40.
5
What type of files are involved in CVE-2017-14279?
CVE-2017-14279 involves crafted .jb2 files that can trigger the vulnerability.