Design/Logic Flaw

2017-07-0520:29:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, because of a “User Mode Write AV near NULL” in WinDjView.exe. One threat model is a victim who obtains an untrusted .djvu file from a remote location and issues several user-defined commands.