CVE-2017-14275

Description

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.059

Associated Vulnerability

VulnerabilityOS Platform
update xnview 2.40 to latest versionWindows
Multiple Vulnerabilities are affected in XnView 2.40Windows
update xnview 2.40 to latest version (For Ubuntu)Linux
update xnview 2.40 to latest version (For Debian)Linux
update xnview 2.40 to latest version (For Centos)Linux
update xnview 2.40 to latest version (For RedHat)Linux
update xnview 2.40 to latest version (For Suse)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234