CVE-2020-35843

low-risk

Published 2021-01-26

FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e.

Do I need to act?

0.17% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Image Viewer

Faststone

Exploit https://github.com/DmitryMeD/pentesting/blob/main/FastStone%20Image%20Viewer%207...

Third Party Advisory https://twitter.com/DmitriyMelikov

Exploit https://github.com/DmitryMeD/pentesting/blob/main/FastStone%20Image%20Viewer%207...

Third Party Advisory https://twitter.com/DmitriyMelikov

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal