CVE-2017-14281

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x00000000000090f1."
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:xnview:xnview:2.40:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:12

Type Values Removed Values Added
References () https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14281 - Third Party Advisory () https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14281 - Third Party Advisory

Information

Published : 2017-09-11 18:29

Updated : 2024-11-21 03:12


NVD link : CVE-2017-14281

Mitre link : CVE-2017-14281

CVE.ORG link : CVE-2017-14281


JSON object : View

Products Affected

xnview

  • xnview

microsoft

  • windows
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer