CVE-2017-14574

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490."...

CVE-2017-14558

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x0000000000018cc2."...

CVE-2017-14570

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1."...

CVE-2017-14556

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000da27."...

CVE-2017-14577

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Control Flow starting at Unknown Symbol @ 0x0000000003aa7cef called from Unknown Symbol @ 0x0000000004aa024d."...

CVE-2017-14575

STDU Viewer 1.6.375 is affected by a buffer overflow when processing crafted .xps files, leading to arbitrary code execution or denial of service. The issue is linked to an Illegal Instruction Violation originating from STDUXPSFile!DllUnregisterServer+0x000000000002566c. Multiple sources (NVD/CNV...

CVE-2017-14551

CVE-2017-14551 affects STDU Viewer 1.6.375. A crafted .djvu file can trigger a vulnerability described as a buffer overflow with denial of service and potentially other impacts. The root cause references Data from Faulting Address controlling Branch Selection at STDUDjVuFile!DllUnregisterServer+0...

CVE-2017-14572

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b."...

CVE-2017-14547

STDU Viewer 1.6.375 has a local, crafted .mobi file-triggered buffer overflow (Read Access Violation at STDUMOBIFile!DllUnregisterServer+0x…c0). The vulnerability enables a local attacker to cause a denial of service and potentially other unspecified impact. Connected CNVD-2017-30324 confirms a b...

CVE-2017-14550

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8."...

CVE-2017-14568

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x000000000297024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025630."...

CVE-2017-14543

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335."...

CVE-2017-14548

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d."...

CVE-2017-14555

Summary (CVE-2017-14555) STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability caused by a buffer overflow when processing crafted .djvu files. The issue is tied to data from a faulting address being used as arguments in a subsequent function call beginning at STDUDjVuF...

CVE-2017-14569

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5."...

CVE-2017-14556

STDU Viewer 1.6.375 contains a buffer overflow vulnerability in the handling of .djvu files (STDU Viewer Buffer Overflow). The issue arises from a flaw in processing a crafted .djvu file, enabling a local attacker to execute arbitrary code or cause a denial of service. Connected sources (CNVD-201...

CVE-2017-14565

STDU Viewer 1.6.375 is affected by a local, user-assisted vulnerability (buffer overflow/possible stack corruption) that can be triggered by processing a specially crafted .xps file. The issue can lead to a denial of service and potentially other unspecified impacts as described in multiple sourc...

CVE-2017-14579

STDU Viewer 1.6.375 contains a local-buffer overflow vulnerability exploitable via a specially crafted .jb2 file, leading to arbitrary code execution or denial of service. Root cause is a Read Access Violation in the STDUJBIG2File path (DllGetClassObject+0x...); disclosure and impact are stated i...

CVE-2017-14554

CVE-2017-14554 affects STDU Viewer 1.6.375. A crafted .djvu file can trigger a denial of service and possibly other impact via a possible stack corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d908. Local attacker access and low attack complexity are indicated; exploitation d...

CVE-2017-14577

STDU Viewer 1.6.375 is affected by a local buffer overflow vulnerability in .xps handling (as per CNVD-2017-30276 and corroborating CVE-2017-14577 entries). A crafted .xps file can lead to arbitrary code execution or a denial of service. Root cause details are not fully disclosed in the provided ...