CVE-2017-8785

High

Published: 05/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

FastStone Image Viewer 6.2 has a 'Data from Faulting Address may be used as a return value' issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe.

Risk Assessment

Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

Recommendation

It is recommended to update FastStone Image Viewer to the latest version to mitigate the risk associated with this vulnerability.

Other vulnerabilities in FastStone Image Viewer 6.2

CVE-2017-8826High
FastStone Image Viewer 6.2 has a 'User Mode Write AV' issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file mishandled by FSViewer.exe.

Original NVD description (English source)

FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS