CVE-2017-15782: Buffer Overflow

Published Oct 22, 2017

Updated

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000032eb."

Affected Software

2 affected components

XnView xnview=2.43

Microsoft Windows

Event History

Oct 22, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15782?

CVE-2017-15782 is considered a high severity vulnerability that may lead to arbitrary code execution or denial of service.

How do I fix CVE-2017-15782?

To mitigate CVE-2017-15782, ensure that you update XnView Classic to the latest version available that addresses this vulnerability.

Which versions of XnView are affected by CVE-2017-15782?

CVE-2017-15782 specifically affects XnView Classic version 2.43.

What types of attacks can CVE-2017-15782 facilitate?

CVE-2017-15782 can facilitate attacks that execute arbitrary code or cause a denial of service when a crafted .dwg file is processed.

Is CVE-2017-15782 exploitable on all Windows systems?

CVE-2017-15782 is specifically exploitable on systems running XnView Classic version 2.43 on Microsoft Windows.