VULNERABILITY INTELLIGENCE

CVE-2017-9894

CVSS score7.8 HIGH

EPSS probability0.54%

CISA KEVNot currently listed

Published2017-07-05

Last modified2026-06-17

Description

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."