Faststone vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-9114 FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-9113 FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-9112 FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2022-36947 Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.Critical 9.8 · Aug 18, 2022
• CVE-2021-26237 FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that isHigh 7.8 · Mar 18, 2021
• CVE-2021-26235 FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR fiHigh 7.8 · Mar 18, 2021
• CVE-2021-26234 FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that isHigh 7.8 · Mar 18, 2021
• CVE-2021-26233 FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when a user opens or views a malformed CUR fiHigh 7.8 · Mar 18, 2021
• CVE-2021-26236 FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER StrucHigh 7.8 · Mar 18, 2021
• CVE-2020-35845 FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.High 7.8 · Jan 26, 2021
• CVE-2020-35844 FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4.High 7.8 · Jan 26, 2021
• CVE-2019-13246 FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601.High 7.8 · Jul 4, 2019
• CVE-2019-13245 FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1.High 7.8 · Jul 4, 2019
• CVE-2019-13244 FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.High 7.8 · Jul 4, 2019
• CVE-2018-11707 FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewerHigh 7.8 · Jun 19, 2018
• CVE-2018-11706 FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.High 7.8 · Jun 19, 2018
• CVE-2018-11705 FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.High 7.8 · Jun 19, 2018
• CVE-2018-11704 FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.High 7.8 · Jun 19, 2018
• CVE-2018-11703 FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.High 7.8 · Jun 19, 2018
• CVE-2018-11702 FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.High 7.8 · Jun 19, 2018
• CVE-2018-11701 FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe.High 7.8 · Jun 19, 2018
• CVE-2017-8826 FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg.High 7.8 · Jul 5, 2017
• CVE-2017-8785 FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue.High 7.8 · Jul 5, 2017
• CVE-2007-1942 Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a craftedHigh 9.3 · Apr 10, 2007