CVE-2017-15789: Buffer Overflow
Published Oct 22, 2017
·Updated
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."
Affected Software
2 affected components
XnView xnview=2.43
Microsoft Windows
Event History
Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15789?
CVE-2017-15789 is classified as a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2017-15789?
To fix CVE-2017-15789, update XnView Classic to version 2.44 or later.
3
What impact does CVE-2017-15789 have on XnView Classic users?
CVE-2017-15789 can allow attackers to execute arbitrary code or cause a denial of service in XnView Classic version 2.43.
4
Is CVE-2017-15789 present in other versions of XnView?
CVE-2017-15789 is only present in XnView Classic version 2.43; later versions are not affected.
5
What type of files are associated with CVE-2017-15789?
CVE-2017-15789 is associated with specially crafted .dwg files that exploit the vulnerability.