Arbitrary Code Execution and Denial of Service Vulnerability in STDU Viewer 1.6.375 via Crafted .jb2 File

Arbitrary Code Execution and Denial of Service Vulnerability in STDU Viewer 1.6.375 via Crafted .jb2 File

CVE-2017-14292 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e."

Learn more about our Cis Benchmark Audit For Server Software.