CVE-2017-10758

XnView Classic for Windows version 2.40 is affected by CVE-2017-10758. A crafted .rle file may cause a denial of service and possibly other unspecified impact, related to a faulting address flow in ntdll (RtlpCoalesceFreeBlocks). The vulnerability is tied to processing of .rle images in XnView Cl...

CVE-2017-10759

XnView Classic for Windows is affected (v2.40). A crafted .rle file may trigger a denial of service and potentially additional impact, with the underlying issue tied to Data from Faulting Address influencing control flow at ntdll_77df0000!LdrpInsertDependencyRecord+0x39. Public CVE entry CVE-2017...

CVE-2017-10764

XnView Classic for Windows Version 2.40 is vulnerable to a denial-of-service (and possibly other impact) via a crafted .rle file. The CVE description links the issue to Data from Faulting Address controlling Branch Selection starting at COMCTL32!Tab_OnGetItem+0x2f, indicating a potential fault-ad...

CVE-2017-10766

XnView Classic for Windows Version 2.40 is vulnerable to a crafted .rle file leading to a denial of service (and potentially other impact). The issue is triggered by data flow from a faulting address that controls branch selection in GDI32!ScriptStringAnalyse+0x1c8. Impact is described as DoS wit...

CVE-2017-10771

XnView Classic for Windows 2.40 is affected by CVE-2017-10771. A crafted .rle file can cause a denial of service and potentially other impact due to how Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x510. The vulnerability arises in the proc...

CVE-2017-10774

XnView Classic for Windows (v2.40) is affected by CVE-2017-10774 via crafted .rle files, enabling denial of service and possibly other impact as described by multiple sources. Root cause references Data from Faulting Address controlling Branch Selection at KERNELBASE!FindSortHashNode+0x…; affecte...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

CVE-2017-8781

CVE-2017-8781 affects XnView Classic for Windows v2.40. The issue is a stack buffer overrun in the handling of JPEG 2000 files when opening a directory in Browser mode, allowing user‑assisted remote code execution as described in the entry. The connected documents corroborate the vulnerability fa...

CVE-2017-9893

XnView Classic for Windows 2.40 is affected by CVE-2017-9893 due to processing of crafted FPX files, enabling potential remote code execution. The issue arises from a vulnerability in handling FPX data (noted as “User Mode Write AV” around gffGetFormatInfo), with the CVSS3 base score reported as ...

CVE-2017-9906

CVE-2017-9906 affects XnView Classic for Windows (version 2.40). The vulnerability is triggered by a crafted .fpx image file, leading to denial of service and possibly unspecified other impact due to a flaw where Data from Faulting Address is used as arguments in a later function call inside Xfpx...

CVE-2017-10770

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCreateSplitBlock+0x000000000000053a."...

CVE-2017-10736

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-10782

XnView Classic for Windows (Version 2.40) is affected by a vulnerability triggered by a crafted .rle file, which can cause a denial of service and potentially other impact. The root cause is associated with heap handling, described as Data from Faulting Address controlling Branch Selection starti...

CVE-2017-9907

CVE-2017-9907 affects XnView Classic for Windows 2.40. A remote attacker can cause a denial of service (and possibly unspecified other impact) by providing a specially crafted FPX file. The issue is related to stack corruption starting at Xfpx!gffGetFormatInfo+0x... as described in the NVD entry ...

CVE-2017-9901

XnView Classic for Windows 2.40 contains a vulnerability in FPX file handling that permits remote code execution. The root cause is described as Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5, enabling arbitrary code execution if ...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

CVE-2017-10768

XnView Classic for Windows v2.40 is affected by CVE-2017-10768 via a crafted .rle file, enabling denial of service and potentially other unspecified impacts. Root cause references a faulting address scenario related to ntdll_77df0000!RtlpInsertFreeBlock+0x1ca. Affected product/component: XnView C...

CVE-2017-9901

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5."...

CVE-2017-10766

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."...