CVE-2017-15785: Buffer Overflow
Published Oct 22, 2017
·Updated
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79."
Affected Software
2 affected components
XnView xnview=2.43
Microsoft Windows
Event History
Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15785?
CVE-2017-15785 has a high severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2017-15785?
To resolve CVE-2017-15785, upgrade XnView Classic to version 2.44 or later.
3
What type of vulnerability is CVE-2017-15785?
CVE-2017-15785 is a code execution vulnerability related to improper handling of .dwg files.
4
Can CVE-2017-15785 lead to a denial of service?
Yes, CVE-2017-15785 can cause a denial of service due to a Data Execution Prevention violation.
5
Which version of XnView is affected by CVE-2017-15785?
XnView Classic version 2.43 is affected by CVE-2017-15785.