PT-2017-19275

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

CVE-2017-10775: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb."...

PT-2017-11477

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-19258

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "Read Access Violation on Control Flow" error. Recommendations For XnView Classic for Windows...

PT-2017-18304

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode. This is due to a "User Mode Wri...

CVE-2017-10742: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-10765: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x0000000000000050."...

CVE-2017-8282: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-10745: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10774: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040."...

CVE-2017-10760: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

PT-2017-11492

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11500

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selectio...

PT-2017-19277

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .bie file. It is related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b." Recommendations...

PT-2017-19256

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548." Recommendations For...

PT-2017-19263

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385...

PT-2017-19259

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "Read Access Violation on Control Flow" error. Recommendations For XnView Classic for Windows...

PT-2017-19267

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

PT-2017-19272

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

PT-2017-11465

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "Read Access Violation on Control Flow" error. Recommendations Fo...