vulnerability

XnSoft XnView: CVE-2017-14285: Remote code execution from crafted .jb2 file related to a "Data from Faulting Address controls Branch Selection"

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:L/AC:L/Au:N/C:P/I:P/A:P)	2017-09-11	2017-09-21	2025-04-25

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Published

2017-09-11

Added

2017-09-21

Modified

2025-04-25

Description

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x000000000000039b."

Solution

xnsoft-xnview-upgrade-2_51_7

References

CVE-2017-14285
https://attackerkb.com/topics/CVE-2017-14285

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today