CVE-2017-15802

Description

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.164

Associated Vulnerability

VulnerabilityOS Platform
update xnview 2.43 to latest versionWindows
update xnview 2.43 to latest version (For Ubuntu)Linux
update xnview 2.43 to latest version (For Debian)Linux
update xnview 2.43 to latest version (For Centos)Linux
update xnview 2.43 to latest version (For RedHat)Linux
update xnview 2.43 to latest version (For Suse)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234