CVE-2017-15781: Buffer Overflow
Published Oct 22, 2017
·Updated
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."
Affected Software
2 affected components
XnView xnview=2.43
Microsoft Windows
Event History
Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15781?
CVE-2017-15781 is considered a critical vulnerability due to its potential to execute arbitrary code.
2
How do I fix CVE-2017-15781?
To fix CVE-2017-15781, update XnView Classic to the latest version available from the official source.
3
Which versions of XnView are affected by CVE-2017-15781?
CVE-2017-15781 specifically affects XnView Classic version 2.43.
4
What type of file is exploited in CVE-2017-15781?
CVE-2017-15781 is exploited via a crafted .dwg file which leads to a read access violation.
5
Can CVE-2017-15781 cause a denial of service?
Yes, CVE-2017-15781 can cause a denial of service in addition to allowing arbitrary code execution.