CVE-2021-26236: Buffer Overflow
FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a malformed/specially crafted CUR file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26236?
CVE-2021-26236 is considered to have a high severity due to the potential for a stack-based buffer overflow that can lead to arbitrary code execution.
How do I fix CVE-2021-26236?
To fix CVE-2021-26236, users must upgrade FastStone Image Viewer to version 7.6 or later.
What types of attacks can exploit CVE-2021-26236?
CVE-2021-26236 can be exploited by attackers using specially crafted CUR files that trigger stack-based buffer overflows.
What versions of FastStone Image Viewer are affected by CVE-2021-26236?
CVE-2021-26236 affects all versions of FastStone Image Viewer up to and including version 7.5.
What impact does CVE-2021-26236 have on system security?
The impact of CVE-2021-26236 on system security can be severe, as it may allow attackers to execute arbitrary code with the privileges of the user running FastStone Image Viewer.