CVE-2021-26236 - CVE House
Back to Database
Status published High CVE-2021-26236

FastStone Image Viewer v.<= 7.5 is affected by a Stack-based...

Vulnerability Description

FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a malformed/specially crafted CUR file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26236

Credits & Attribution

No credits recorded in the NVD database.

References

More from faststone

View All →
CVE-2022-36947
Unsafe Parsing of a PNG tRNS chunk in FastStone Image...
Critical 9.8
CVE-2021-26237
FastStone Image Viewer <= 7.5 is affected by a user...
High 7.8
CVE-2021-26235
FastStone Image Viewer <= 7.5 is affected by a user...
High 7.8
CVE-2021-26234
FastStone Image Viewer <= 7.5 is affected by a user...
High 7.8
CVE-2021-26233
FastStone Image Viewer <= 7.5 is affected by a user...
High 7.8

Affected Vendor

Affected Software

image viewer
Vulnerable Versions:
0

Timeline

Official Publish: March 18th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.