CVE-2017-8826

High

Published: 05/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

FastStone Image Viewer 6.2 has a 'User Mode Write AV' issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file mishandled by FSViewer.exe.

Risk Assessment

Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact, which may affect the application's availability.

Recommendation

It is recommended to update FastStone Image Viewer to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Other vulnerabilities in FastStone Image Viewer 6.2

CVE-2017-8785High
FastStone Image Viewer 6.2 has a 'Data from Faulting Address may be used as a return value' issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe.

Original NVD description (English source)

FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS