Vulnerabilities > Faststone

DATE CVE VULNERABILITY TITLE RISK
2018-06-20 CVE-2018-11704 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.
local
low complexity
faststone CWE-119
7.8
2018-06-20 CVE-2018-11703 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.
local
low complexity
faststone CWE-119
7.8
2018-06-20 CVE-2018-11702 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.
local
low complexity
faststone CWE-119
7.8
2018-06-20 CVE-2018-11701 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.
local
low complexity
faststone CWE-119
7.8
2017-07-05 CVE-2017-8826 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg.
local
low complexity
faststone CWE-119
7.8
2017-07-05 CVE-2017-8785 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue.
local
low complexity
faststone CWE-119
7.8
2017-02-21 CVE-2017-6078 Improper Input Validation vulnerability in Faststone Maxview 3.0/3.1
FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section.
local
low complexity
faststone CWE-20
5.5