CVE-2017-14538: Buffer Overflow
Published Sep 18, 2017
·Updated
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008823."
Affected Software
2 affected components
XnView xnview=2.40
Microsoft Windows
Event History
Sep 18, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14538?
CVE-2017-14538 has a high severity rating due to its potential for arbitrary code execution and denial of service.
2
How do I fix CVE-2017-14538?
To fix CVE-2017-14538, upgrade XnView Classic to a version later than 2.40 that addresses this vulnerability.
3
Which versions of XnView are affected by CVE-2017-14538?
CVE-2017-14538 affects XnView Classic version 2.40 specifically.
4
What types of attacks are possible with CVE-2017-14538?
CVE-2017-14538 allows attackers to execute arbitrary code or trigger a denial of service with crafted .jb2 files.
5
On which operating systems does CVE-2017-14538 impact users?
CVE-2017-14538 impacts users running XnView Classic on Microsoft Windows.