CVE-2017-10742

Description

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from ntdll_77df0000!LdrxCallInitRoutine+0x0000000000000016.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.052

Associated Vulnerability

Vulnerability	OS Platform
update xnview 2.40 to latest version	Windows
Multiple Vulnerabilities are affected in XnView 2.40	Windows
update xnview 2.40 to latest version (For Ubuntu)	Linux
update xnview 2.40 to latest version (For Debian)	Linux
update xnview 2.40 to latest version (For Centos)	Linux
update xnview 2.40 to latest version (For RedHat)	Linux
update xnview 2.40 to latest version (For Suse)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234