PT-2007-3287 · Faststone · Faststone Image Viewer

Ivan Fratric · Publicado 2007-04-11 · Atualizado 2018-10-16 · CVE-2007-1942

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 2.9

Description The issue is related to an integer overflow in the handling of crafted BMP images, which can lead to a denial of service and potentially allow the execution of arbitrary code. This has been demonstrated using specific crafted images.

Recommendations For FastStone Image Viewer version 2.9, update to a newer version that addresses this issue to prevent potential exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-1942

Produtos afetados

Faststone Image Viewer

Referências · 8

• 🔥 http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html · Exploit
• 🔥 https://exploit-db.com/exploits/29816 · Exploit
• http://securityreason.com/securityalert/2558 · Nota
• http://osvdb.org/34664 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1942 · Nota de Segurança
• http://securityfocus.com/bid/23312 · Nota
• http://secunia.com/advisories/24784 · Aviso do Fabricante
• http://securityfocus.com/archive/1/464726/100/0/threaded · Nota