Security readout for executives and security teams
Plain-English summary
CVE-2017-14566 concerns STDU Viewer 1.6.375 processing a malicious XPS document. The reported impact is arbitrary code execution or application denial of service. Business risk depends on whether this legacy viewer is installed and used to open untrusted XPS files.
Executive priority
Prioritize as a legacy endpoint exposure review, not an emergency based on current evidence. Escalate if STDU Viewer 1.6.375 is widely deployed or used with external XPS documents.
Technical view
The CVE describes a crafted .xps file triggering a user-mode write access violation in STDU Viewer 1.6.375. Public metadata does not provide CVSS, CWE, affected CPEs, patch status, or detailed root cause beyond the crash context.
Likely exposure
Exposure is most likely on workstations with STDU Viewer 1.6.375 installed, especially where users can receive and open XPS files from email, web downloads, or shared folders. Server exposure is not indicated by the provided sources.
Exploitation context
The source bundle does not cite active exploitation, and CISA KEV status is false. The vulnerability appears document-triggered and likely requires a user or workflow to open a crafted XPS file.
Researcher notes
Evidence is sparse: the CVE record names STDU Viewer 1.6.375 and a crafted XPS trigger, but lacks CVSS, CWE, exploit status, and remediation details. Avoid assuming broader product versions or a specific patch without vendor confirmation.
Mitigation direction
- Inventory systems for STDU Viewer 1.6.375 installations.
- Check vendor or project guidance for fixed builds or retirement advice.
- Remove STDU Viewer where it is not business-required.
- Restrict opening untrusted XPS files in STDU Viewer.
- Use endpoint controls to reduce risky document handling.
Validation and detection
- Confirm whether STDU Viewer 1.6.375 exists in software inventory.
- Review XPS file associations on exposed workstations.
- Check whether users receive XPS files from external sources.
- Verify whether any vendor-recommended update or replacement is deployed.
- Document exceptions where the viewer remains required.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Execution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2017-14566 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14566CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.