CVE-2017-14277

Description

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a Read Access Violation starting at jbig2dec+0x0000000000005956.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.053

Associated Vulnerability

VulnerabilityOS Platform
update xnview 2.40 to latest versionWindows
Multiple Vulnerabilities are affected in XnView 2.40Windows
update xnview 2.40 to latest version (For Ubuntu)Linux
update xnview 2.40 to latest version (For Debian)Linux
update xnview 2.40 to latest version (For Centos)Linux
update xnview 2.40 to latest version (For RedHat)Linux
update xnview 2.40 to latest version (For Suse)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234