CVE-2017-15802: Buffer Overflow

Published Oct 22, 2017

Updated

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll77310000!LdrpResCompareResourceNames+0x0000000000000087."

Affected Software

2 affected components

XnView xnview=2.43

Microsoft Windows

Event History

Oct 22, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15802?

CVE-2017-15802 has a high severity level due to the potential for denial of service attacks.

How do I fix CVE-2017-15802?

To fix CVE-2017-15802, update XnView Classic to the latest version that addresses this vulnerability.

What versions of XnView are affected by CVE-2017-15802?

CVE-2017-15802 specifically affects XnView Classic version 2.43.

What impact can CVE-2017-15802 have on my system?

CVE-2017-15802 can lead to a denial of service or potentially other unspecified impacts.

Is CVE-2017-15802 a remote or local vulnerability?

CVE-2017-15802 is primarily a local vulnerability, as it requires the attacker to have crafted a specific .dll file.