CVE-2022-40657

Summary

CVE-2022-40657 is a newly disclosed vulnerability that affects NIKON NIS-Elements Viewer 1.2100.1483.0. This issue enables remote attackers to execute arbitrary code on susceptible systems. Exploitation of this vulnerability requires user interaction, as the target must visit a maliciously crafted webpage or open a malicious file. The root cause of the issue lies in the improper handling of PSD files during parsing, resulting in a write past the end of an allocated buffer. Successful exploitation grants attackers the ability to run code in the context of the current process. This vulnerability was identified as ZDI-CAN-15073 by ZDI.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.