NVD

Id
88103  
Name
CVE-2017-7894  
Description
WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, because of a User Mode Write AV near NULL in WinDjView.exe. One threat model is a victim who obtains an untrusted .djvu file from a remote location and issues several zoom in (e.g., Ctrl + Plus) commands.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-05  
Modified Date
2017-07-14  
Seq
2017-7894  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422259 88103 CVE-2016-5810 http://www.zerodayinitiative.com/advisories/ZDI-16-429  View
422260 88103 CVE-2016-5810 https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01  View
430469 88103 CVE-2017-0689 99478  View
430470 88103 CVE-2017-0689 https://source.android.com/security/bulletin/2017-07-01  View
430471 88103 CVE-2017-0689 99478  View
430472 88103 CVE-2017-0689 https://source.android.com/security/bulletin/2017-07-01  View

Related JVN