CVE-2017-15788: Buffer Overflow
Published Oct 22, 2017
·Updated
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x0000000000002d83."
Affected Software
2 affected components
XnView xnview=2.43
Microsoft Windows
Event History
Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15788?
CVE-2017-15788 has a critical severity level due to its potential to execute arbitrary code.
2
How do I fix CVE-2017-15788?
To fix CVE-2017-15788, update XnView Classic to version 2.44 or later.
3
What causes CVE-2017-15788?
CVE-2017-15788 is caused by improper handling of crafted .dwg files in XnView Classic.
4
Who is affected by CVE-2017-15788?
Users of XnView Classic version 2.43 on Windows are affected by CVE-2017-15788.
5
What types of attacks can exploit CVE-2017-15788?
CVE-2017-15788 can be exploited to execute arbitrary code or trigger a denial of service.