Security readout for executives and security teams
Plain-English summary
This issue affects XnView Classic for Windows 2.40 when it opens a crafted RLE image file. The documented impact is a denial of service, with unspecified other impact possible. Evidence is limited, so business risk depends mainly on whether users still open untrusted .rle files with this old desktop viewer.
Executive priority
Prioritize if the organization still uses XnView Classic 2.40 for externally supplied images. Otherwise, treat as a legacy desktop software hygiene item with limited evidence of current exploitation.
Technical view
CVE-2017-10778 describes a crafted .rle file causing a fault where data from the faulting address controls branch selection in XnView Classic 2.40. The source bundle does not provide CVSS, CWE, fixed version, or confirmed code execution details.
Likely exposure
Exposure is most likely on Windows workstations with XnView Classic 2.40 installed and associated with RLE files. It is not described as remotely network-exploitable; user interaction with a crafted file appears central.
Exploitation context
The source bundle does not identify active exploitation, and KEV status is false. Public evidence provided only supports crafted-file denial of service and possible unspecified impact, not confirmed exploitation in the wild.
Researcher notes
The record is sparse: no CVSS vector, CWE, patch reference, or precise impact beyond denial of service and unspecified other impact. Avoid assuming code execution without further vendor or researcher evidence.
Mitigation direction
- Inventory Windows endpoints for XnView Classic 2.40.
- Check XnView vendor guidance for fixed versions or mitigations.
- Avoid opening .rle files from untrusted sources in XnView Classic 2.40.
- Quarantine unexpected .rle attachments or downloads where business use is absent.
- Prefer a supported image viewer for handling untrusted image files.
Validation and detection
- Confirm whether XnView Classic 2.40 is installed on managed Windows endpoints.
- Check file associations for .rle opening in XnView Classic.
- Review email and web gateways for recent .rle file delivery.
- Verify any remediation against vendor guidance before closure.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-10778 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10778CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.