CVE Feed

    Dashboard / CVE / CVE-2021-26233

    CVE-2021-26233

    FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

    Published:Mar 18, 2021
    Last Modified:Nov 21, 2024
    EPS:Mar 18, 2021
    EPSS Score:0.00317
    CVSS Score:7.8

    Affected Products

    Vendor
    Faststone
    Product
    Image Viewer

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-30041 (CVSS 7.5) — An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbi…
    CVE-2024-9114 (CVSS 7.8) — FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9113 (CVSS 7.8) — FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9112 (CVSS 7.8) — FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2022-36947 (CVSS 9.8) — Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.…
    CVE-2021-26237 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when …
    CVE-2021-26235 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, trigg…
    CVE-2021-26234 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when …
    CVE-2021-26236 (CVSS 7.8) — FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR …
    CVE-2020-35845 (CVSS 7.8) — FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High