CVE-2020-23898: 
WildBit Viewer vulnerability analysis and mitigation

A User Mode Write Access Violation (AV) vulnerability exists in WildBit Viewer version 6.6 at Editor+0x5ea2, which allows attackers to cause a denial of service (DoS) condition via a crafted TGA file (AttackerKB).

The vulnerability is a memory corruption issue that occurs when processing TGA files in the Editor component. When triggered, it results in a Write Access Violation at memory address 0xffffffffa1b7b7b7, causing the application to crash. The vulnerability has been assigned a CVSS v3 Base Score of 5.5 (Medium), with Attack Vector: Local, Attack Complexity: Low, Privileges Required: None, and User Interaction: Required (AttackerKB).

The successful exploitation of this vulnerability results in a denial of service condition, affecting the availability of the WildBit Viewer application. When exploited, the application crashes, disrupting the user's ability to view and edit images (AttackerKB).

The vulnerability requires user interaction to open a specially crafted TGA file. The attack vector is local, meaning the attacker needs to deliver the malicious file to the target system. No authentication is required to exploit the vulnerability once the file is opened by the user (AttackerKB).

Users should upgrade to a version newer than 6.6 of WildBit Viewer. As a workaround, users should avoid opening untrusted TGA files until the vulnerability is patched (WildBit Software).