Approved changes feed: RSS · Atom

cpe:2.3:a:faststone:image_viewer:7.8:*:*:*:*:*:*:*

part: a version: 7.8 update: *

VendorFaststone (2343aefd-2dd6-5b51-8698-d427e9051275)
ProductImage Viewer (fb8cdb93-2fd1-5865-81e7-c6d0352e3657)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9114 vulnerable 2026-06-08 07:00:26.676202 FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25145.
Published: 2024-11-22T21:34:05.006Z
Updated: 2024-11-22T21:48:38.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9113 vulnerable 2026-06-08 07:00:26.675823 FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TGA files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25140.
Published: 2024-11-22T21:33:54.875Z
Updated: 2024-11-26T15:18:28.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9112 vulnerable 2026-06-08 07:00:26.674198 FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25102.
Published: 2024-11-22T21:33:43.532Z
Updated: 2024-11-26T15:18:54.969Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.