Faststone Image Viewer — known CVE vulnerabilities

Every CVE whose affected-product data names Faststone Image Viewer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (32)

• CVE-2022-36947 — CVSS 9.8 (critical): Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.
• CVE-2007-1942 — CVSS 9.3 (critical): Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute…
• CVE-2017-8785 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a…
• CVE-2017-8826 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This…
• CVE-2018-11701 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled…
• CVE-2018-11702 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled…
• CVE-2018-11703 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled…
• CVE-2018-11704 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled…
• CVE-2018-11705 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled…
• CVE-2018-11706 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled…
• CVE-2018-11707 — CVSS 7.8 (high): FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is…
• CVE-2024-9113 — CVSS 7.8 (high): FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers…
• CVE-2024-9112 — CVSS 7.8 (high): FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers…
• CVE-2021-26237 — CVSS 7.8 (high): FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a…
• CVE-2021-26236 — CVSS 7.8 (high): FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality…
• CVE-2019-13244 — CVSS 7.8 (high): FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.
• CVE-2019-13245 — CVSS 7.8 (high): FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1.
• CVE-2019-13246 — CVSS 7.8 (high): FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601.
• CVE-2021-26235 — CVSS 7.8 (high): FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or…
• CVE-2020-35844 — CVSS 7.8 (high): FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4.
• CVE-2020-35845 — CVSS 7.8 (high): FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.
• CVE-2021-26234 — CVSS 7.8 (high): FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a…
• CVE-2021-26233 — CVSS 7.8 (high): FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when a user opens or…
• CVE-2024-9114 — CVSS 7.8 (high): FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers…
• CVE-2007-1764 — CVSS 6.0 (medium): Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG…
• CVE-2020-35843 — CVSS 5.5 (medium): FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e.
• CVE-2018-15817 — CVSS 5.5 (medium): FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image…
• CVE-2018-15816 — CVSS 5.5 (medium): FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image…
• CVE-2018-15815 — CVSS 5.5 (medium): FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image…
• CVE-2018-15814 — CVSS 5.5 (medium): FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file.
• CVE-2018-15813 — CVSS 5.5 (medium): FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image file.
• CVE-2008-5870 — CVSS 4.3 (medium): FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with…