CVE-2017-15777: Buffer Overflow
Published Oct 22, 2017
·Updated
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."
Affected Software
2 affected components
XnView xnview=2.43
Microsoft Windows
Event History
Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15777?
CVE-2017-15777 has a critical severity level due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2017-15777?
To fix CVE-2017-15777, update XnView Classic to a version that addresses the vulnerability.
3
What type of files can exploit CVE-2017-15777?
CVE-2017-15777 can be exploited through specially crafted .dwg files.
4
Which versions of XnView are affected by CVE-2017-15777?
CVE-2017-15777 affects XnView Classic version 2.43.
5
Can CVE-2017-15777 affect Microsoft Windows?
CVE-2017-15777 specifically affects XnView Classic running on Microsoft Windows.