CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...

CVE-2017-10742

XnView Classic for Windows (Version 2.40) is vulnerable to arbitrary code execution or denial of service via specially crafted .rle files. The underlying issue is described as a Data Execution Prevention Violation originating from a function path in ntdll during initialization. The affected produ...

CVE-2017-10742

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-10769

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" without RPC...

CVE-2017-9910

XnView Classic for Windows 2.40 is affected by CVE-2017-9910. A buffer overflow vulnerability exists that can be triggered by a specially crafted FPX file, allowing a remote attacker to cause a denial of service (and potentially other impact). The CNVD entry explicitly notes the buffer overflow a...

CVE-2017-9894

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."...

CVE-2017-10767

XnView Classic for Windows Version 2.40 is affected by a vulnerability that can be triggered by a specially crafted .rle file, potentially causing a denial-of-service and possibly other impact as described in CVE-2017-10767. Public references in CNVD-2017-14512 and NVD detail a buffer-overflow st...

CVE-2017-9913

XnView Classic for Windows 2.40 is vulnerable to a crafted .fpx file that can cause a denial of service and potentially unspecified impact, linked to the data-from-faulting-address control path in ntdll_77df0000!TpAllocCleanupGroup+. This CVE entry (CVE-2017-9913) is described in the NVD record a...

CVE-2017-9912

XnView Classic for Windows (version 2.40) is affected by CVE-2017-9912 due to a buffer/denial-of-service condition triggered by a crafted .fpx file. The root cause is described as data from a faulting address impacting a heap-free path (ntdll_77df0000!RtlpFreeHeap+0x...); the impact is a remote d...

CVE-2017-10769

XnView Classic for Windows 2.40 is affected by a vulnerability triggered by a crafted .rle file, leading to denial of service and potentially other impact. The issue is associated with data from a faulting address influencing Branch Selection starting at ntdll_77df0000!memcmp, without RPC initial...

CVE-2017-10743

XnView Classic for Windows 2.40 is vulnerable to a buffer-overrun in a crafted .rle file, related to a Stack Buffer Overrun at ntdll_77df0000!LdrpInitializeNode. This can allow arbitrary code execution or a denial of service. No remediation details are provided in the documents.

CVE-2017-10763

Affected software: XnView Classic for Windows, version 2.40. Vulnerability type / impact: processing a crafted .rle file may cause a denial of service and possibly other unspecified impact, with the fault pointing to Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!...

CVE-2017-10755

XnView Classic for Windows 2.40 is affected by CVE-2017-10755. A crafted .rle file may cause a denial of service and potentially other impact, connected to Data from Faulting Address influencing Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b. The CVSS3 base sc...

CVE-2017-10737

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...

CVE-2017-10748

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

CVE-2017-10770

CVE-2017-10770 affects XnView Classic for Windows 2.40; a crafted .rle file may cause a denial of service (DoS) and potentially other impact due to data from a faulting address in ntdll, per NVD entry and CNVD-2017-14508 documentation. No patch/version remediation details are provided in the supp...

Working Resources BadBlue Server 2.40 phptest.php Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue...

CVE-2009-4292

Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-4292

Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors...

Blender .blend File Command Execution Vulnerability

blender is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...