vendor:
FastStone Image Viewer
by:
Jean Pascal Pereira
9,3
CVSS
HIGH
Arbitrary Code Execution
119
CWE
Product Name: FastStone Image Viewer
Affected Version From: 4.6
Affected Version To: 4.6
Patch Exists: YES
Related CWE: CVE-2009-0385
CPE: a:faststone:faststone_image_viewer
Metasploit:
https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-746-1/, https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-763-1/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0698/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2009-0698/, https://www.rapid7.com/db/vulnerabilities/freebsd-vid-6733e1bf-125f-11de-a964-0030843d3802/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0385/, https://www.rapid7.com/db/vulnerabilities/ffmpeg-cve-2009-0385/
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009
FastStone Image Viewer 4.6 <= ReadAVonIP Arbitrary Code Execution
A vulnerability in FastStone Image Viewer 4.6 allows an attacker to execute arbitrary code by crafting a malicious GIF file. This vulnerability is due to a stack-based buffer overflow in the ReadAVonIP() function of the FSViewer.exe application. By sending a specially crafted GIF file, an attacker can cause a stack-based buffer overflow, which can be exploited to execute arbitrary code.
Mitigation:
Users should upgrade to the latest version of FastStone Image Viewer.
