Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlInterlockedPopEntrySList+0x000000000000039b."...

CVE-2017-14276

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."...

CVE-2017-14279

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...

CVE-2017-14285

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlInterlockedPopEntrySList+0x000000000000039b."...

CVE-2017-14272

CVE-2017-14272 affects XnView Classic for Windows 2.40. A flaw in processing a crafted .jb2 file allows arbitrary code execution or a denial of service via a User Mode Write AV starting at jbig2dec+0x595d. Impact is local with low privileges and no user interaction; CVSS3 base score 7.8 (HIGH). C...

CVE-2017-14275

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-14275. The vulnerability allows arbitrary code execution or denial of service via a specially crafted .jb2 file, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d. The CNVD-2017-3259...

CVE-2017-14283

XnView Classic for Windows Version 2.40 is affected by a vulnerability in the JBIG2 decoder (triggered by a crafted .jb2 file) that can cause a denial of service and potentially other impact. The issue is described as a Read Access Violation starting at jbig2dec+0x0000000000008fe4, indicating a f...

CVE-2017-14277

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005956."...

CVE-2017-14282

XnView Classic for Windows 2.40 is affected by CVE-2017-14282: a crafted .jb2 file can trigger a denial of service, related to a Read Access Violation in jbig2dec. The CNVD entry specifies a DoS impact (and possibly other unspecified impact). Public remediation details are not provided in the con...

CVE-2017-14284

CVE-2017-14284 affects XnView Classic for Windows 2.40. A crafted .jb2 file can cause a denial of service and possibly other impact, related to data from a faulting address controlling branch selection starting at ntdll!RtlGetCurrentDirectory_U+0x… (details from NVD/CNVD entries). The available c...

CVE-2017-14279

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...

CVE-2017-14274

XnView Classic for Windows 2.40 is affected by a vulnerability in processing JB2/JBIG2 data that allows arbitrary code execution or denial of service. Root cause: Data from a faulting address controls the subsequent write address in the jbig2dec path (offset around 0x8706). Impact is arbitrary co...

CVE-2017-14283

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000008fe4."...

CVE-2017-14279

CVE-2017-14279 affects XnView Classic for Windows v2.40. A crafted .jb2 file can trigger a denial of service through a Read Access Violation starting at jbig2dec+0x5643, as described in the CVE entry and corroborated by CNVD-2017-32600/NVD records. The vulnerability is triggered by processing a m...

CVE-2017-14276

XnView Classic for Windows 2.40 is affected by CVE-2017-14276. A crafted .jb2 (JBIG2) file can cause a denial of service, with potential additional impact related to stack corruption (jbig2dec+0x0000000000002fbe). CNVD-2017-32597 confirms a DoS via a specially crafted .jb2 file. Affected componen...

CVE-2017-14272

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000595d."...

CVE-2017-14280

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d."...

CVE-2017-14278

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005940."...

CVE-2017-14285

XnView Classic for Windows Version 2.40 is affected by CVE-2017-14285. A crafted .jb2 file can cause a denial of service and potentially other unspecified impact. The vulnerability is triggered during processing of the JB2 image format, related to Data from Faulting Address controls Branch Select...

CVE-2017-14270

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlFillMemoryUlong+0x0000000000000010."...