CVE-2017-15777

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."...

CVE-2017-15777

XnView Classic for Windows Version 2.43 is affected by CVE-2017-15777. A crafted .dwg file can trigger a buffer/memory handling issue in CADImage+0x0000000000288750 that allows arbitrary code execution or causes a denial of service. Reported across multiple security sources (SUSE, CNVD, CNVD-like...