CVE-2017-10779

XnView Classic for Windows Version 2.40 is affected by CVE-2017-10779. A crafted .rle file can cause a denial of service (and possibly other impact) due to memory handling at a faulting address in xnview+0x0000000000013a20. The vulnerability is documented across multiple sources (NVD entry CVE-20...

CVE-2017-10782

XnView Classic for Windows (Version 2.40) is affected by a vulnerability triggered by a crafted .rle file, which can cause a denial of service and potentially other impact. The root cause is associated with heap handling, described as Data from Faulting Address controlling Branch Selection starti...

CVE-2017-10760

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

CVE-2017-10736

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-9903

Affected software: XnView Classic for Windows (Version 2.40). Vulnerability details: Multiple connected sources indicate a buffer/memory corruption issue in .fpx handling that can allow code execution. The NVD description cites remote code execution via a crafted .fpx file (Data from Faulting Add...

CVE-2017-9897

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab."...

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

CVE-2017-9909

XnView Classic for Windows 2.40 is affected by CVE-2017-9909. A crafted .fpx file can cause remote denial of service (and potentially other impact) due to a fault address control in ntdll, specifically referencing RtlAddAccessAllowedAce. Public records describe this as a buffer-overflow style iss...

CVE-2017-10758

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...

CVE-2017-10739

CVE-2017-10739 affects XnView Classic for Windows, version 2.40. A crafted .rle file can lead to arbitrary code execution or a denial of service, due to a Data Execution Prevention Violation starting at an unknown symbol in the program flow. The description does not provide concrete vulnerable co...

CVE-2017-9909

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."...

CVE-2017-9910

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an "Error Code 0xc000041d starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10767

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."...

CVE-2017-9897

XnView Classic for Windows (v2.40) is affected by a vulnerability leading to remote code execution via crafted .fpx files. Multiple sources describe this issue as a buffer‑overflow type vulnerability rooted in XnView’s handling of FPX data, enabling control flow or memory corruption when parsing ...

CVE-2017-10778

XnView Classic for Windows 2.40 is affected by CVE-2017-10778. A crafted .rle file may cause a denial of service and possibly other unspecified impacts, related to Data from Faulting Address controls Branch Selection (starting at xnview+0x0000000000233125). The CVSS data in the record indicates a...

CVE-2017-9529

CVE-2017-9529 affects XnView Classic for Windows, version 2.40. Multiple connected sources confirm a buffer overflow in FPX file handling that can be triggered by a remote attacker via a specially crafted .fpx file, leading to remote code execution on the affected host. The underlying cause is an...

CVE-2017-10740

Summary: CVE-2017-10740 affects XnView Classic for Windows (version 2.40). A buffer overflow can be triggered by a specially crafted .rle file, potentially allowing a local attacker to execute arbitrary code or cause a denial of service. The documented root cause references a User Mode Write AV s...

CVE-2017-10757

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10757 due to a vulnerability in parsing crafted .rle image files. The issue, described in multiple sources, can cause a denial of service and may have unspecified additional impact, related to Data from Faulting Address controls Br...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-10749

CVE-2017-10749 affects XnView Classic for Windows 2.40. A buffer overflow in handling a crafted .rle file could allow arbitrary code execution or a denial of service, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x... The OpenVAS entry notes multiple vulnerabili...