Code injection

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa...

CVE-2019-13085

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa...

CVE-2019-13085

CVE-2019-13085 affects XnView Classic 2.48. The publicly disclosed detail is a User Mode Write access violation starting at xnview+0x000000000030ecfa, indicating a write fault in user mode. The CVE entries consistently reference XnView Classic 2.48 and describe a write-AV condition; CVSS metrics ...

CVE-2019-13085

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa...

CVE-2019-13084

CVE-2019-13084 affects XnView Classic 2.48. Affected component is the XnView executable where a User Mode Write AV starts at xnview+0x000000000026b739, implying memory corruption leading to an access violation. Public documentation in connected sources confirms the vendor/CM details (e.g., Red Ha...

CVE-2019-13084

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739...

CVE-2019-13083

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a...

XnView Classic Denial of Service Vulnerability (CNVD-2019-12189)

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic version 2.48 Windows. A remote attacker can exploit this vulnerability to cause a denial of service...

XnView Classic Denial of Service Vulnerability (CNVD-2019-12170)

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic version 2.48 Windows. A remote attacker can exploit this vulnerability to cause a denial of service...

Design/Logic Flaw

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem...

Design/Logic Flaw

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c...

Design/Logic Flaw

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to xnview+0x385399...

Code injection

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString...

CVE-2019-9968

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem...

CVE-2019-9969

CVE-2019-9969 affects XnView Classic 2.48 on Windows. A crafted file can trigger a denial of service (application crash) and potentially other impact related to the xnview+0x385399 code path. The connected records corroborate the same vulnerability across multiple vendors (Red Hat, CNVD, CVE data...

CVE-2018-0522

Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

BUFFALO WXR-1900DHP2 Authentication Vulnerability

The BUFFALO WXR-1900DHP2 is a wireless router from BUFFALO Japan. An authentication vulnerability exists in the BUFFALO WXR-1900DHP2 Ver.2.48 and earlier firmware versions, which can be exploited by an attacker to execute arbitrary commands on an affected network device...

BUFFALO WXR-1900DHP2 Buffer Overflow Vulnerability

The BUFFALO WXR-1900DHP2 is a wireless router from BUFFALO Japan. A buffer overflow vulnerability exists in the BUFFALO WXR-1900DHP2 Ver.2.48 and earlier firmware versions, which can be exploited by an attacker to execute arbitrary code by accessing a malicious file...

BUFFALO WXR-1900DHP2 OS Command Injection Vulnerability

The BUFFALO WXR-1900DHP2 is a wireless router from BUFFALO Japan. An OS command injection vulnerability exists in the BUFFALO WXR-1900DHP2 Ver.2.48 and earlier firmware versions, which can be exploited by an attacker to execute arbitrary commands on an affected network device...

dnsmasq security update

2.48-18 - Fix CVE-2017-14491...