High severity7.8NVD Advisory· Published Jul 5, 2017· Updated May 13, 2026
CVE-2017-7894
CVE-2017-7894
Description
WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, because of a "User Mode Write AV near NULL" in WinDjView.exe. One threat model is a victim who obtains an untrusted .djvu file from a remote location and issues several user-defined commands.
Affected products
1- cpe:2.3:a:windjview_project:windjview:2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/wlinzi/security_advisories/tree/master/CVE-2017-7894nvdThird Party Advisory
News mentions
0No linked articles in our index yet.