CVE-2017-14574

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490."...

CVE-2017-14558

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x0000000000018cc2."...

CVE-2017-14566

STDU Viewer 1.6.375 is affected by a buffer overflow when processing specially crafted .xps files, enabling local attackers to execute arbitrary code or cause a denial of service. The vulnerability is described across multiple sources (CNVD-2017-30287, NVD CVE-2017-14566) with the root cause cite...

CVE-2017-14548

STDU Viewer 1.6.375 is affected by a local, buffer overflow vulnerability triggered by a crafted .djvu file. The issue arises in a user-mode code path related to DllUnregisterServer, enabling a local attacker to potentially execute arbitrary code or cause a denial of service. The CVE description ...

CVE-2017-14549

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-14547

STDU Viewer 1.6.375 has a local, crafted .mobi file-triggered buffer overflow (Read Access Violation at STDUMOBIFile!DllUnregisterServer+0x…c0). The vulnerability enables a local attacker to cause a denial of service and potentially other unspecified impact. Connected CNVD-2017-30324 confirms a b...

CVE-2017-14560

STDU Viewer 1.6.375 is vulnerable to a buffer overflow via a specially crafted .xps file (reported in CVE-2017-14560). The issue relates to Data from Faulting Address controlling Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x5bd2, potentially allowing a local attacker to cause a ...

CVE-2017-14545

STDU Viewer 1.6.375 is affected by a vulnerability described across multiple sources as a buffer overflow in EPUB handling. The issue appears to be triggered by processing a specially crafted .epub file, with the root cause tied to memory/branch handling in the STDUEPubFile!DllUnregisterServer+0x...

CVE-2017-14553

CVE-2017-14553 affects STDU Viewer 1.6.375. A buffer overflow vulnerability exists when handling a crafted .djvu file, related to a location in STDUDjVuFile!DllUnregisterServer+0x00000000000085f5, which could allow a local attacker to execute arbitrary code or cause a denial of service. The conne...

CVE-2017-14542

STDU Viewer 1.6.375 contains a buffer overflow vulnerability (per CNVD-2017-30441) that a local attacker can exploit by processing a specially crafted .epub file, potentially leading to arbitrary code execution or a denial of service. The connected CNVD entry confirms the issue in STDU Viewer and...

CVE-2017-14543

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335."...

CVE-2017-14544

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-14579

STDU Viewer 1.6.375 contains a local-buffer overflow vulnerability exploitable via a specially crafted .jb2 file, leading to arbitrary code execution or denial of service. Root cause is a Read Access Violation in the STDUJBIG2File path (DllGetClassObject+0x...); disclosure and impact are stated i...

CVE-2017-14564

STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability via crafted .xps files. The issue is described as a buffer overflow in STDU Viewer (CNVD-2017-30289; NVD entry CVE-2017-14564) with the faulting address affecting the Branch Selection starting at STDUXPSFile!DllUnreg...

CVE-2017-14568

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x000000000297024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025630."...

CVE-2017-14569

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5."...

CVE-2017-14577

STDU Viewer 1.6.375 is affected by a local buffer overflow vulnerability in .xps handling (as per CNVD-2017-30276 and corroborating CVE-2017-14577 entries). A crafted .xps file can lead to arbitrary code execution or a denial of service. Root cause details are not fully disclosed in the provided ...

CVE-2017-14561

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000048c024d called from STDUXPSFile!DllUnregisterServer+0x0000000000025638."...

CVE-2017-14557

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f."...

CVE-2017-14565

STDU Viewer 1.6.375 is affected by a local, user-assisted vulnerability (buffer overflow/possible stack corruption) that can be triggered by processing a specially crafted .xps file. The issue can lead to a denial of service and potentially other unspecified impacts as described in multiple sourc...