CVE-2017-9909: Buffer Overflow

Published Jul 5, 2017

Updated

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."

Affected Software

1 affected component

XnView xnview=2.40

Event History

Jul 5, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-9909?

CVE-2017-9909 has been classified as a potential denial-of-service vulnerability.

How do I fix CVE-2017-9909?

To mitigate CVE-2017-9909, consider upgrading to a newer version of XnView that addresses this vulnerability.

What versions of XnView are affected by CVE-2017-9909?

Only XnView Classic for Windows Version 2.40 is known to be affected by CVE-2017-9909.

Can CVE-2017-9909 be exploited remotely?

Yes, CVE-2017-9909 can be exploited remotely via specially crafted .fpx files.

What impact can CVE-2017-9909 have on my system?

CVE-2017-9909 could result in a denial of service or other unspecified impacts on systems using the vulnerable version.