Faststone Image Viewer vulnerabilities

CVE-2018-11706 [HIGH] CWE-119 CVE-2018-11706: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a m FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2018-11705 [HIGH] CWE-119 CVE-2018-11705: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a m FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2018-11702 [HIGH] CWE-119 CVE-2018-11702: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a m FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2017-8826 [HIGH] CWE-119 CVE-2017-8826: FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term f FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2017-8785 [HIGH] CWE-119 CVE-2017-8785: FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. T FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

CVE-2007-1764 [MEDIUM] CVE-2007-1764: Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to e Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG image.

CVE-2020-35843 [MEDIUM] CWE-787 CVE-2020-35843: FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x9 FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e.

CVE-2018-15817 [MEDIUM] CWE-119 CVE-2018-15817: FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+ FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file.

CVE-2018-15816 [MEDIUM] CWE-119 CVE-2018-15816: FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+ FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file.

CVE-2018-15814 [MEDIUM] CWE-119 CVE-2018-15814: FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file.

CVE-2018-15815 [MEDIUM] CWE-754 CVE-2018-15815: FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+ FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file.

CVE-2018-15813 [MEDIUM] CWE-119 CVE-2018-15813: FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image file.