Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::sToolTipsWndProc+0x0000000000000032."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" without RPC...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx+0x0000000000010e81...

Stack overflow

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...

Code injection

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."...

CVE-2017-10740

Summary: CVE-2017-10740 affects XnView Classic for Windows (version 2.40). A buffer overflow can be triggered by a specially crafted .rle file, potentially allowing a local attacker to execute arbitrary code or cause a denial of service. The documented root cause references a User Mode Write AV s...

CVE-2017-10744

XnView Classic for Windows (version 2.40) is affected by CVE-2017-10744. The vulnerability arises when parsing a specially crafted .rle file, causing a Read Access Violation in COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x... which can lead to arbitrary code execution or a denial of service. The av...

CVE-2017-9909

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."...

CVE-2017-10749

CVE-2017-10749 affects XnView Classic for Windows 2.40. A buffer overflow in handling a crafted .rle file could allow arbitrary code execution or a denial of service, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x... The OpenVAS entry notes multiple vulnerabili...

CVE-2017-10782

XnView Classic for Windows (Version 2.40) is affected by a vulnerability triggered by a crafted .rle file, which can cause a denial of service and potentially other impact. The root cause is associated with heap handling, described as Data from Faulting Address controlling Branch Selection starti...

CVE-2017-10768

XnView Classic for Windows v2.40 is affected by CVE-2017-10768 via a crafted .rle file, enabling denial of service and potentially other unspecified impacts. Root cause references a faulting address scenario related to ntdll_77df0000!RtlpInsertFreeBlock+0x1ca. Affected product/component: XnView C...

CVE-2017-10777

CVE-2017-10777 affects XnView Classic for Windows 2.40. Connected sources indicate a vulnerability in the .rle file handling that can cause a denial of service via a crafted .rle file, attributed to a buffer overflow in parsing such files. Public references (CNVD-2017-14516, NVD entry) describe t...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...