IKARUS Anti Virus for Windows Code Execution Vulnerability

IKARUS Anti Virus for Windows is the Austrian IKARUS Security Software's set of antivirus software based on the Windows platform. A security vulnerability exists in IKARUS Anti Virus version 2.16.7 for Windows. A remote attacker could exploit this vulnerability to conduct a man-in-the-middle atta...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-32373)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.43 of XnView Classic for...

CVE-2017-15783

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1."...

CVE-2017-15775

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4."...

CVE-2017-15779

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0."...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2017-30128)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows that originates from a program's failure to properly handle calls to Advanced Local Procedure Call ALPC. A local attacker could exploi...

The vulnerability of the Uniscribe service component of the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Uniscribe service component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory incorrect handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2017-14947

Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at mupdfnet64!mIncrementalSaveFile+0x0000000000193359."...

EternalBlue Exploit Used in Retefe Banking Trojan Campaign

Criminals behind the Retefe banking Trojan have added a new component to their malware that uses the NSA exploit EternalBlue. The update makes Retefe the latest malware family to adopt the SMBv1 attack against a patched Windows vulnerability, and could signal an emerging trend, said researchers a...

Design/Logic Flaw

Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Microsoft Windows GDI+ Information Disclosure Vulnerability (CNVD-2017-33471)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems released by Microsoft.GDI+ component is one of the graphics components. An information disclosure vulnerability exists in the GDI+ component of Microsoft Windows, which arises from a program's failure to properly publi...

XnView Classic for Windows Denial of Service Vulnerability (CNVD-2017-32597)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

XnView Classic for Windows Denial of Service Vulnerability (CNVD-2017-32604)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

XnView Classic for Windows Arbitrary Code Execution Vulnerability (CNVD-2017-32595)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

Microsoft Edge Spoofing Vulnerability (CNVD-2017-28653)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. Edge in Microsoft Windows has a spoofing...

Microsoft Windows graphics information disclosure vulnerability (CNVD-2017-33309)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems released by Microsoft Corporation in the United States. graphics is one of the graphics driver components. An information disclosure vulnerability exists in graphics in Microsoft Windows, which arises from the program'...

CVE-2017-14284

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlGetCurrentDirectoryU+0x000000000000016c."...

CVE-2017-14276

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."...

CVE-2017-14279

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...

CVE-2017-14272

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000595d."...