CVE-2017-8381

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of…

published July 5, 2017

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01596 · 75.4th percentile
Published
2017-07-05T19:00Z
EPSS history
Timeline
  • 05 JUL 19:00Z
    XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of…
    cvelistv5