Denial of Service and Potential Code Execution Vulnerability in XnView Classic for Windows Version 2.40

Denial of Service and Potential Code Execution Vulnerability in XnView Classic for Windows Version 2.40

CVE-2017-14282 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005862."

Learn more about our Web Application Penetration Testing UK.