CVE-2021-26237

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions 7.5 and earlier

Description The issue is triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe, resulting in a user mode write access violation at 0x00402d7d. This could be exploited for a Denial of Service (DoS) or possibly to achieve code execution.

Recommendations For FastStone Image Viewer versions 7.5 and earlier, avoid opening or viewing malformed CUR files until a patch is available. As a temporary workaround, consider restricting the use of FSViewer.exe to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.