CVE-2017-10767 - XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."

Back Back to CVE browser

HIGH

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."

Published Jul 5, 2017

7.8

HIGH

CVSS 3.0

EPSS 0.31%

Description

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-2413
Advisory
https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-2413		Advisory
https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767		x_refsource_MISCThird Party Advisory