Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x0000000000000050."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

Stack overflow

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10744

XnView Classic for Windows (version 2.40) is affected by CVE-2017-10744. The vulnerability arises when parsing a specially crafted .rle file, causing a Read Access Violation in COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x... which can lead to arbitrary code execution or a denial of service. The av...

CVE-2017-10777

CVE-2017-10777 affects XnView Classic for Windows 2.40. Connected sources indicate a vulnerability in the .rle file handling that can cause a denial of service via a crafted .rle file, attributed to a buffer overflow in parsing such files. Public references (CNVD-2017-14516, NVD entry) describe t...

CVE-2017-10780

CVE-2017-10780 affects XnView Classic for Windows (Version 2.40). The vulnerability arises from handling of a crafted .rle file, with the description indicating a denial of service and possible unspecified impact due to “Data from Faulting Address controls Branch Selection starting at xnview+0x00...

CVE-2017-10759

XnView Classic for Windows is affected (v2.40). A crafted .rle file may trigger a denial of service and potentially additional impact, with the underlying issue tied to Data from Faulting Address influencing control flow at ntdll_77df0000!LdrpInsertDependencyRecord+0x39. Public CVE entry CVE-2017...

CVE-2017-10774

XnView Classic for Windows (v2.40) is affected by CVE-2017-10774 via crafted .rle files, enabling denial of service and possibly other impact as described by multiple sources. Root cause references Data from Faulting Address controlling Branch Selection at KERNELBASE!FindSortHashNode+0x…; affecte...

CVE-2017-10740

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlRbInsertNodeEx+0x000000000000002d."...

CVE-2017-10746

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-9908

CVE-2017-9908 affects XnView Classic for Windows 2.40 . The vulnerability allows a remote attacker to cause a denial of service (and possibly other impacts) by opening a specially crafted .fpx file, related to a Read Access Violation at Xfpx+0x…d6da. Public references in the connected data confir...

CVE-2017-10783

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10783 via a crafted .rle file. The root cause is described as data from a faulting address influencing Branch Selection beginning at ntdll_77df0000!RtlpFreeHeap+0x393, leading to a denial of service and potentially unspecified othe...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...

CVE-2017-10777

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24."...

CVE-2017-10768

XnView Classic for Windows v2.40 is affected by CVE-2017-10768 via a crafted .rle file, enabling denial of service and potentially other unspecified impacts. Root cause references a faulting address scenario related to ntdll_77df0000!RtlpInsertFreeBlock+0x1ca. Affected product/component: XnView C...

CVE-2017-10749

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10779

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000013a20."...