CVE-2017-10741

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10746

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10732

CVE-2017-10732 affects IrfanView 4.44 (32-bit) with multiple .rle-related buffer overflow vulnerabilities in image parsing/thumbnailing, potentially enabling DoS or arbitrary code execution. Connected sources enumerate several 32‑bit vulnerabilities and related FPX/TOOL plugins, with root causes ...

CVE-2017-10748

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

CVE-2017-10729

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10742

XnView Classic for Windows (Version 2.40) is vulnerable to arbitrary code execution or denial of service via specially crafted .rle files. The underlying issue is described as a Data Execution Prevention Violation originating from a function path in ntdll during initialization. The affected produ...

CVE-2017-10732

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x0000000000000429."...

CVE-2017-10733

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031."...

CVE-2017-10758

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...

CVE-2017-10764

XnView Classic for Windows Version 2.40 is vulnerable to a denial-of-service (and possibly other impact) via a crafted .rle file. The CVE description links the issue to Data from Faulting Address controlling Branch Selection starting at COMCTL32!Tab_OnGetItem+0x2f, indicating a potential fault-ad...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10757

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10757 due to a vulnerability in parsing crafted .rle image files. The issue, described in multiple sources, can cause a denial of service and may have unspecified additional impact, related to Data from Faulting Address controls Br...

CVE-2017-10773

CVE-2017-10773 affects XnView Classic for Windows (version 2.40). The available descriptions indicate a denial-of-service condition triggered by processing a specially crafted .rle file, related to control flow starting at MSCTF!_CtfImeCreateThreadMgr. The vulnerability is local in scope with low...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

CVE-2017-10730

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96."...

CVE-2017-10755

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInitializeThread+0x000000000000010b."...

CVE-2017-10769

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" without RPC...

CVE-2017-10730

Affected product: IrfanView 4.44 (32‑bit). Technical details from connected docs show a buffer overflow in the image formats, notably the .rle parser, and multiple local/exploitable vulnerabilities in IrfanView 4.44 with FPX/TOOLs plugins and other formats (PDF, SVG, DJVU, etc.). Root causes invo...

CVE-2017-10734

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to an "Invalid Handle starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10754

CVE-2017-10754 affects XnView Classic for Windows v2.40. A crafted .rle file may trigger a denial of service (and potentially unspecified impact) due to a buffer overflow related to Data from Faulting Address and control flow in ntdll. CNVD describes a buffer overflow vulnerability in XnView Clas...