CVE-2017-14284: Buffer Overflow

Published Sep 11, 2017

Updated

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlGetCurrentDirectoryU+0x000000000000016c."

Affected Software

2 affected components

XnView xnview=2.40

Microsoft Windows

Event History

Sep 11, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-14284?

CVE-2017-14284 is classified as a denial of service vulnerability.

How do I fix CVE-2017-14284?

To fix CVE-2017-14284, update to a later version of XnView Classic that resolves this vulnerability.

What systems are affected by CVE-2017-14284?

CVE-2017-14284 specifically affects XnView Classic version 2.40 running on Windows.

What is the impact of CVE-2017-14284?

The impact of CVE-2017-14284 can result in a denial of service or potentially unspecified effects when processing crafted .jb2 files.

How can I identify if CVE-2017-14284 has been exploited?

To identify exploitation of CVE-2017-14284, monitor system logs for unusual application crashes or resource exhaustion events linked to XnView Classic.