Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

STDU Viewer 1.6.375 can run malicious code from .jb2 files

CVE-2017-14286 · published 9 years ago
Summary

The STDU Viewer version 1.6.375 can be tricked by a specially crafted .jb2 document to run unwanted programs or crash the application. This could let an attacker take control of a workstation or cause it to stop working. Upgrade to a newer version of STDU Viewer or stop opening .jb2 files from untrusted sources until a patch is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
stdutility stdu_viewer 1.6.375
cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*
Original advisory text
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0...
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000cb8c."
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published11 Sep 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-14286 · NVD
Track software like this
Free during beta