CVE-2017-14285

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlInterlockedPopEntrySList+0x000000000000039b."...

CVE-2017-14306

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10."...

CVE-2017-14310

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .jb2 file. Multiple sources (NVD entry CVE-2017-14310 and CNVD-2017-30269) describe a denial of service and possibly unspecified impact, associated with a Read Access Violation at STDUJBIG2File!DllUnregisterServer+0x1869 an...

CVE-2017-14271

XnView Classic for Windows v2.40 is affected by CVE-2017-14271. A crafted .jb2 file can lead to arbitrary code execution or a denial of service. The vulnerability is associated with the handling of .jb2 files, tied to a User Mode Write operation in ntdll-related code path mentioned in the CVE des...

CVE-2017-14271

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlImpersonateSelfEx+0x000000000000024e."...

CVE-2017-14294

STDU Viewer 1.6.375 is affected by CVE-2017-14294. A crafted .jb2 file can lead to arbitrary code execution or to a denial of service, with the issue tied to a User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000566e. Documents consistently identify the affected product...

CVE-2017-14291

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d8."...

CVE-2017-14299

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x000000000000384b."...

CVE-2017-14300

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x0000000000004479."...

CVE-2017-14301

STDU Viewer 1.6.375 is affected by CVE-2017-14301 through a buffer overflow triggered by a specially crafted .jb2 file. The root cause is described as Data from Faulting Address controls subsequent Write Address, starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d3, which can lead to ...

CVE-2017-14297

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000002f35."...

CVE-2017-14299

The CVE-2017-14299 entry concerns STDU Viewer 1.6.375. Affected component: the STDUJBIG2File handling (via a crafted .jb2 file). Root cause/trigger: Data from Faulting Address controls subsequent Write Address inside STDUJBIG2File!DllGetClassObject+0x384b, leading to arbitrary code execution or a...

CVE-2017-14284

CVE-2017-14284 affects XnView Classic for Windows 2.40. A crafted .jb2 file can cause a denial of service and possibly other impact, related to data from a faulting address controlling branch selection starting at ntdll!RtlGetCurrentDirectory_U+0x… (details from NVD/CNVD entries). The available c...

CVE-2017-14283

XnView Classic for Windows Version 2.40 is affected by a vulnerability in the JBIG2 decoder (triggered by a crafted .jb2 file) that can cause a denial of service and potentially other impact. The issue is described as a Read Access Violation starting at jbig2dec+0x0000000000008fe4, indicating a f...

CVE-2017-14289

CVE-2017-14289 affects STDU Viewer 1.6.375. A vulnerability in the STDUJBIG2File component (User Mode Write AV at STDUJBIG2File!DllGetClassObject+0x...303e) allows crafted .jb2 files to trigger arbitrary code execution or a denial of service. The provided connected sources confirm the vulnerabili...

CVE-2017-14272

CVE-2017-14272 affects XnView Classic for Windows 2.40. A flaw in processing a crafted .jb2 file allows arbitrary code execution or a denial of service via a User Mode Write AV starting at jbig2dec+0x595d. Impact is local with low privileges and no user interaction; CVSS3 base score 7.8 (HIGH). C...

CVE-2017-14273

XnView Classic for Windows v2.40 is affected by CVE-2017-14273. A crafted .jb2 file can lead to arbitrary code execution or a denial of service. The description attributes the issue to a memory-write vulnerability in user-mode code starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x… (User ...

CVE-2017-14270

XnView Classic for Windows 2.40 is affected by an arbitrary code execution/DoS vulnerability triggered by a specially crafted .jb2 file. The issue is associated with a user-mode write condition described as starting at ntdll_77400000!RtlFillMemoryUlong+0x… and is documented in multiple sources (e...

CVE-2017-14295

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File+0x00000000000015e9."...

CVE-2017-14292

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e."...