CVE-2017-10736

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-10783

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10783 via a crafted .rle file. The root cause is described as data from a faulting address influencing Branch Selection beginning at ntdll_77df0000!RtlpFreeHeap+0x393, leading to a denial of service and potentially unspecified othe...

CVE-2017-10777

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24."...

CVE-2017-10745

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10731

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d80."...

CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...

CVE-2017-10739

CVE-2017-10739 affects XnView Classic for Windows, version 2.40. A crafted .rle file can lead to arbitrary code execution or a denial of service, due to a Data Execution Prevention Violation starting at an unknown symbol in the program flow. The description does not provide concrete vulnerable co...

CVE-2017-10750

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10755

XnView Classic for Windows 2.40 is affected by CVE-2017-10755. A crafted .rle file may cause a denial of service and potentially other impact, connected to Data from Faulting Address influencing Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b. The CVSS3 base sc...

CVE-2017-10766

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."...

CVE-2017-10774

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040."...

CVE-2017-10734

CVE-2017-10734 affects IrfanView 4.44 (32-bit). The vulnerability is a buffer/handle issue during .rle processing, with the description noting that a crafted .rle file may cause denial of service or unspecified impact, tied to an invalid handle in wow64. CNVD-2017-14159 corroborates a .rle buffer...

CVE-2017-10737

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...

CVE-2017-10769

XnView Classic for Windows 2.40 is affected by a vulnerability triggered by a crafted .rle file, leading to denial of service and potentially other impact. The issue is associated with data from a faulting address influencing Branch Selection starting at ntdll_77df0000!memcmp, without RPC initial...

CVE-2017-10766

XnView Classic for Windows Version 2.40 is vulnerable to a crafted .rle file leading to a denial of service (and potentially other impact). The issue is triggered by data flow from a faulting address that controls branch selection in GDI32!ScriptStringAnalyse+0x1c8. Impact is described as DoS wit...

CVE-2017-10746

CVE-2017-10746 affects XnView Classic for Windows 2.40. A buffer overflow in the .rle file handling can be exploited to execute arbitrary code or cause a denial of service, related to a User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012. The vulnerability is ...

CVE-2017-10757

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."...

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

CVE-2017-10783

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

gdal: Heap-buffer-overflow in LercNS::RLE::decompress

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4726197688729600 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62a0000119...