CVE-2017-9911

CVE-2017-9911 affects XnView Classic for Windows version 2.40, where processing a crafted FPX file can cause denial of service (and possibly other impact). Root cause described as Data from Faulting Address used as arguments in a subsequent Function Call (starting at Xfpx+0x0000000000010e81). Pub...

CVE-2017-10746

CVE-2017-10746 affects XnView Classic for Windows 2.40. A buffer overflow in the .rle file handling can be exploited to execute arbitrary code or cause a denial of service, related to a User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012. The vulnerability is ...

CVE-2017-10757

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."...

CVE-2017-9899

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388."...

CVE-2017-9900

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."...

CVE-2017-10762

CVE-2017-10762 affects XnView Classic for Windows, version 2.40. The vulnerability arises from processing a crafted .rle file, where data from a faulting address controls branch selection starting at ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f. This can lead to denial of service and potent...

CVE-2017-10777

CVE-2017-10777 affects XnView Classic for Windows 2.40. Connected sources indicate a vulnerability in the .rle file handling that can cause a denial of service via a crafted .rle file, attributed to a buffer overflow in parsing such files. Public references (CNVD-2017-14516, NVD entry) describe t...

CVE-2017-10756

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpRemoveUCRBlock+0x0000000000000046."...

CVE-2017-10737

CVE-2017-10737 affects XnView Classic for Windows (Version 2.40). The vulnerability is triggered by processing a specially crafted .rle file, leading to arbitrary code execution or a denial of service, related to a memory handling issue in user-mode code (described as starting at ntdll_77df0000!R...

CVE-2017-10780

CVE-2017-10780 affects XnView Classic for Windows (Version 2.40). The vulnerability arises from handling of a crafted .rle file, with the description indicating a denial of service and possible unspecified impact due to “Data from Faulting Address controls Branch Selection starting at xnview+0x00...

CVE-2017-10759

XnView Classic for Windows is affected (v2.40). A crafted .rle file may trigger a denial of service and potentially additional impact, with the underlying issue tied to Data from Faulting Address influencing control flow at ntdll_77df0000!LdrpInsertDependencyRecord+0x39. Public CVE entry CVE-2017...

CVE-2017-10748

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

CVE-2017-10755

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInitializeThread+0x000000000000010b."...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

CVE-2017-10770

CVE-2017-10770 affects XnView Classic for Windows 2.40; a crafted .rle file may cause a denial of service (DoS) and potentially other impact due to data from a faulting address in ntdll, per NVD entry and CNVD-2017-14508 documentation. No patch/version remediation details are provided in the supp...

CVE-2017-10752

CVE-2017-10752 affects XnView Classic for Windows (v2.40). A crafted .rle file may cause denial of service and potentially other unspecified impact due to triggering a faulting address path: Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x0000...

CVE-2017-10780

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a."...

CVE-2017-10741

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10781

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByName+0x00000000000000a5."...

CVE-2017-10737

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...