CVE-2017-9904

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-10780

CVE-2017-10780 affects XnView Classic for Windows (Version 2.40). The vulnerability arises from handling of a crafted .rle file, with the description indicating a denial of service and possible unspecified impact due to “Data from Faulting Address controls Branch Selection starting at xnview+0x00...

CVE-2017-10753

CVE-2017-10753 affects XnView Classic for Windows 2.40. The vulnerability arises from processing a crafted .rle file, potentially allowing denial of service and possibly other unspecified impact. The description references a faulting address control path in ntdll where a DLL mapping branch is sel...

CVE-2017-9908

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at Xfpx+0x000000000000d6da."...

CVE-2017-9905

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at Xfpx!gffGetFormatInfo+0x00000000000228e8."...

CVE-2017-10749

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10753

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046."...

CVE-2017-10742

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-9913

XnView Classic for Windows 2.40 is vulnerable to a crafted .fpx file that can cause a denial of service and potentially unspecified impact, linked to the data-from-faulting-address control path in ntdll_77df0000!TpAllocCleanupGroup+. This CVE entry (CVE-2017-9913) is described in the NVD record a...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...

CVE-2017-9903

Affected software: XnView Classic for Windows (Version 2.40). Vulnerability details: Multiple connected sources indicate a buffer/memory corruption issue in .fpx handling that can allow code execution. The NVD description cites remote code execution via a crafted .fpx file (Data from Faulting Add...

CVE-2017-9914

CVE-2017-9914 affects XnView Classic for Windows (v2.40). The vulnerability allows remote code execution via a specially crafted .bie file, tied to a Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b. This entry indicates a potentially high-impact result (code executio...

CVE-2017-10749

CVE-2017-10749 affects XnView Classic for Windows 2.40. A buffer overflow in handling a crafted .rle file could allow arbitrary code execution or a denial of service, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x... The OpenVAS entry notes multiple vulnerabili...

CVE-2017-10757

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10757 due to a vulnerability in parsing crafted .rle image files. The issue, described in multiple sources, can cause a denial of service and may have unspecified additional impact, related to Data from Faulting Address controls Br...

CVE-2017-9911

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx+0x0000000000010e81...

CVE-2017-10740

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlRbInsertNodeEx+0x000000000000002d."...

CVE-2017-9896

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."...

CVE-2017-10759

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInsertDependencyRecord+0x0000000000000039."...

CVE-2017-10752

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...