First published: Fri Sep 22 2017(Updated: )
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Stdutility Stdu Viewer | =1.6.375 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-14692 has a critical severity level due to its potential for arbitrary code execution.
To mitigate CVE-2017-14692, upgrade to the latest version of STDU Viewer that addresses this vulnerability.
CVE-2017-14692 can facilitate arbitrary code execution and denial of service attacks when processing specially crafted .jb2 files.
Users of STDU Viewer version 1.6.375 are primarily affected by CVE-2017-14692.
CVE-2017-14692 exploits a vulnerability in STDU Viewer through a crafted .jb2 file leading to a User Mode Write AV.