Faststone Image Viewer vulnerabilities

CVE-2007-1942 [CRITICAL] CVE-2007-1942: Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp.

CVE-2022-36947 [CRITICAL] CWE-787 CVE-2022-36947: Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer o Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.

CVE-2024-9112 [HIGH] CWE-787 CVE-2024-9112: FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The

CVE-2021-26236 [HIGH] CWE-787 CVE-2021-26236: FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affectin FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a

CVE-2024-9114 [HIGH] CWE-787 CVE-2024-9114: FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The

CVE-2024-9113 [HIGH] CWE-787 CVE-2024-9113: FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The

CVE-2021-26237 [HIGH] CWE-787 CVE-2021-26237: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, trigg FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

CVE-2021-26234 [HIGH] CWE-787 CVE-2021-26234: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, trigg FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

CVE-2021-26233 [HIGH] CWE-787 CVE-2021-26233: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bd FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

CVE-2021-26235 [HIGH] CWE-476 CVE-2021-26235: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bd FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

CVE-2020-35844 [HIGH] CWE-787 CVE-2020-35844: FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xb FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4.

CVE-2020-35845 [HIGH] CWE-787 CVE-2020-35845: FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x9 FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.

CVE-2019-13246 [HIGH] CWE-787 CVE-2019-13246: FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601. FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601.

CVE-2019-13245 [HIGH] CWE-787 CVE-2019-13245: FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1. FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1.

CVE-2019-13244 [HIGH] CWE-787 CVE-2019-13244: FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d. FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.

CVE-2008-5870 [MEDIUM] CVE-2008-5870: FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942.

CVE-2018-11707 [HIGH] CWE-119 CVE-2018-11707: FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the use FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2018-11701 [HIGH] CWE-119 CVE-2018-11701: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a m FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2018-11704 [HIGH] CWE-119 CVE-2018-11704: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a m FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2018-11703 [HIGH] CWE-119 CVE-2018-11703: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a m FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.