CVE Feed

    Dashboard / CVE / CVE-2017-8785

    CVE-2017-8785

    FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.

    Published:Jul 5, 2017
    Last Modified:Apr 20, 2025
    EPS:Jul 5, 2017
    EPSS Score:0.00201
    CVSS Score:7.8

    Affected Products

    Vendor
    Faststone
    Product
    Image Viewer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-30041 (CVSS 7.5) — An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbi…
    CVE-2024-9114 (CVSS 7.8) — FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9113 (CVSS 7.8) — FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9112 (CVSS 7.8) — FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2022-36947 (CVSS 9.8) — Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.…
    CVE-2021-26237 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when …
    CVE-2021-26235 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, trigg…
    CVE-2021-26234 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when …
    CVE-2021-26233 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, trigg…
    CVE-2021-26236 (CVSS 7.8) — FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High