Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

STDU Viewer may run code or crash via .jb2 file

CVE-2017-14690 · published 9 years ago
Summary

The STDU Viewer 1.6.375 program can be tricked by a specially crafted .jb2 document to execute unwanted programs or stop working. This happens because the program mishandles data when opening the file. Users should stop opening .jb2 files from unknown sources and upgrade to a newer, fixed version of STDU Viewer as soon as it is available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
stdutility stdu_viewer 1.6.375
cpe:2.3:a:stdutility:stdu_viewer:1.6.375:*:*:*:*:*:*:*
Original advisory text
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address startin...
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7."
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published22 Sep 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-14690 · NVD
Track software like this
Free during beta