Denial of Service and Potential Remote Code Execution in XnView Classic for Windows Version 2.43 via Crafted .dwg File

CVE-2017-15772

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d."

Learn more about our Web Application Penetration Testing UK.