Lucene search

[email protected]CVE-2018-15817

HistoryMar 26, 2019 - 8:29 p.m.

CVE-2018-15817

2019-03-2620:29:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2018-15817

faststone image viewer

read access violation

block data move

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

JSON

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file.

Affected configurations

NVD

Node

faststoneimage_viewerMatch6.5

CPENameOperatorVersion
faststone:image_viewerfaststone image viewereq6.5

CPE	Name	Operator	Version
faststone:image_viewer	faststone image viewer	eq	6.5

References

0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

JSON

Related for CVE-2018-15817

prion1 cvelist1 nvd1