Approved changes feed: RSS · Atom

cpe:2.3:a:nikon:nis-elements_viewer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNikon (2f5d5fb6-d0d6-538b-824e-5ae3645d597f)
ProductNis Elements Viewer (c1fb9232-cd48-56e1-a109-48a19b6ca894)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40663 vulnerable 2026-06-08 05:48:27.865252 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15697.
Published: 2022-09-15T15:26:38.000Z
Updated: 2025-04-29T18:38:35.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40662 vulnerable 2026-06-08 05:48:27.864642 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15351.
Published: 2022-09-15T15:26:37.000Z
Updated: 2025-04-30T15:01:53.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40661 vulnerable 2026-06-08 05:48:27.863998 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15134.
Published: 2022-09-15T15:26:36.000Z
Updated: 2025-01-07T18:54:21.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40660 vulnerable 2026-06-08 05:48:27.863608 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15135.
Published: 2022-09-15T15:26:35.000Z
Updated: 2025-01-07T18:52:56.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40659 vulnerable 2026-06-08 05:48:27.863204 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15214.
Published: 2022-09-15T15:26:34.000Z
Updated: 2025-01-07T18:51:15.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40658 vulnerable 2026-06-08 05:48:27.862685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40657 vulnerable 2026-06-08 05:48:27.862090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40656 vulnerable 2026-06-08 05:48:27.860727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40655 vulnerable 2026-06-08 05:48:27.859724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.