CVE-2017-14292

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e."...

CVE-2017-14291

STDU Viewer 1.6.375 is affected by CVE-2017-14291. A crafted .jb2 file can lead to arbitrary code execution or denial of service, linked to a User Mode Write AV at STDUJBIG2File!DllUnregisterServer+0x76d8. Multiple sources (NVD/CNVD/CVELIST) confirm the vulnerability and impact, with local attack...

CVE-2017-14293

STDU Viewer 1.6.375 is affected by CVE-2017-14293 due to a crafted .jb2 file triggering a heap corruption condition in wow64!Wow64LdrpInitialize, enabling arbitrary code execution or a denial of service. The vulnerability is a buffer/heap-based overflow in the STDU Viewer component handling JB2 f...

CVE-2017-14289

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000303e."...

CVE-2017-14290

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-14286

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000cb8c."...

CVE-2017-14306

CVE-2017-14306 affects STDU Viewer 1.6.375 via crafted .jb2 files. The root cause is a read access violation in STDUJBIG2File during DllUnregisterServer, leading to denial of service and potentially additional impact. Public sources in connected documents describe a buffer/access violation vulner...

CVE-2017-14303

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x0000000000003047."...

CVE-2017-14303

STDU Viewer 1.6.375 is affected by a vulnerability that can be triggered by a specially crafted .jb2 file. According to multiple sources, this may cause a denial of service and potentially other unspecified impact due to a Read Access Violation in STDUJBIG2File!DllGetClassObject (starting at that...

CVE-2017-14309

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8."...

CVE-2017-14273

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlInterlockedPopEntrySList+0x00000000000003b0."...

CVE-2017-14270

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlFillMemoryUlong+0x0000000000000010."...

CVE-2017-14295

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability triggered by a specially crafted .jb2 file. The issue allows an attacker to execute arbitrary code or cause a denial of service, with the root cause described as Data from Faulting Address controls Code Flow starting at STDUJBIG2F...

CVE-2017-14296

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6."...

CVE-2017-14305

STDU Viewer 1.6.375 is affected by CVE-2017-14305. A vulnerability in a crafted .jb2 file can trigger a buffer/related fault condition related to Data from Faulting Address controls Branch Selection at STDUJBIG2File!DllUnregisterServer+0x0000000000005578, enabling denial of service and potentiall...

CVE-2017-14305

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578."...

CVE-2017-14286

STDU Viewer 1.6.375 is affected by CVE-2017-14286. A vulnerability in processing specially crafted .jb2 files can lead to arbitrary code execution or a denial of service, related to a User Mode Write AV originating from STDUJBIG2File!DllUnregisterServer+0xcb8c. The issue is a buffer/write conditi...

CVE-2017-14287

STDU Viewer 1.6.375 is affected by CVE-2017-14287. A crafted .jb2 file can trigger a Read Access Violation in STDUJBIG2File, leading to arbitrary code execution or a denial of service. CVSSv3 indicates a high impact (7.8) with local access, no user interaction required, and high impact to confide...

CVE-2017-7885

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a craft...

Integer overflow

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...