PT-2007-3287 · Faststone · Faststone Image Viewer

Ivan Fratric · Published 2007-04-11 · Updated 2018-10-16 · CVE-2007-1942

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 2.9

Description The issue is related to an integer overflow in the handling of crafted BMP images, which can lead to a denial of service and potentially allow the execution of arbitrary code. This has been demonstrated using specific crafted images.

Recommendations For FastStone Image Viewer version 2.9, update to a newer version that addresses this issue to prevent potential exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-1942

Affected Products

Faststone Image Viewer

References · 8

• 🔥 http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html · Exploit
• 🔥 https://exploit-db.com/exploits/29816 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1942 · Security Note
• http://secunia.com/advisories/24784 · Vendor Advisory
• http://securityreason.com/securityalert/2558 · Note
• http://osvdb.org/34664 · Note
• http://securityfocus.com/bid/23312 · Note
• http://securityfocus.com/archive/1/464726/100/0/threaded · Note