CVE-2020-23899: 
WildBit Viewer vulnerability analysis and mitigation

CVE-2020-23899 affects WildBit Viewer version 6.6, where a User Mode Write Access Violation (AV) vulnerability exists in Editor+0x5f91. The vulnerability was disclosed on November 10, 2021, and allows attackers to cause a denial of service (DoS) condition through a specially crafted TGA file (NVD).

The vulnerability is classified as a User Mode Write Access Violation occurring at memory location Editor+0x5f91. It has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability is associated with CWE-787 (Out-of-bounds Write) and requires user interaction to trigger the exploit (NVD, GitHub Analysis).

When successfully exploited, the vulnerability can lead to a denial of service condition in WildBit Viewer. The impact is limited to availability with no direct effect on confidentiality or integrity of the system (NVD).

The vulnerability requires local access and user interaction to exploit. An attacker needs to craft a specific TGA file that, when opened by the victim using WildBit Viewer 6.6, triggers the Write Access Violation (NVD).

Users should upgrade to a newer version of WildBit Viewer beyond version 6.6. The latest version available is 6.14 as of August 2024 (WildBit Software).