CVE-2017-9909

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."...

CVE-2017-9896

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."...

CVE-2017-9912

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

CVE-2017-9529

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."...

CVE-2017-10780

CVE-2017-10780 affects XnView Classic for Windows (Version 2.40). The vulnerability arises from handling of a crafted .rle file, with the description indicating a denial of service and possible unspecified impact due to “Data from Faulting Address controls Branch Selection starting at xnview+0x00...

CVE-2017-10744

XnView Classic for Windows (version 2.40) is affected by CVE-2017-10744. The vulnerability arises when parsing a specially crafted .rle file, causing a Read Access Violation in COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x... which can lead to arbitrary code execution or a denial of service. The av...

CVE-2017-9912

XnView Classic for Windows (version 2.40) is affected by CVE-2017-9912 due to a buffer/denial-of-service condition triggered by a crafted .fpx file. The root cause is described as data from a faulting address impacting a heap-free path (ntdll_77df0000!RtlpFreeHeap+0x...); the impact is a remote d...

CVE-2017-10776

XnView Classic for Windows (Version 2.40) is affected by a buffer overflow vulnerability reported in CNVD-2017-14515. The issue can be triggered by processing a specially crafted .rle file, potentially leading to a denial of service. Other connected sources reference the same CVE (CVE-2017-10776)...

CVE-2017-10749

CVE-2017-10749 affects XnView Classic for Windows 2.40. A buffer overflow in handling a crafted .rle file could allow arbitrary code execution or a denial of service, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x... The OpenVAS entry notes multiple vulnerabili...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...

CVE-2017-8381

XnView Classic for Windows 2.40 is affected by CVE-2017-8381. The flaw allows a user-assisted remote attacker to execute code by opening a crafted .mkv file, triggered during the handling of a directory in Browser mode due to a User Mode Write AV near NULL in XnView.exe. Impact described as remot...

CVE-2017-10777

CVE-2017-10777 affects XnView Classic for Windows 2.40. Connected sources indicate a vulnerability in the .rle file handling that can cause a denial of service via a crafted .rle file, attributed to a buffer overflow in parsing such files. Public references (CNVD-2017-14516, NVD entry) describe t...

CVE-2017-10748

CNVD-2017-19919 and NVD entry CVE-2017-10748 describe a buffer overflow in XnView Classic for Windows 2.40 that can be triggered by a specially crafted .rle file, enabling arbitrary code execution or denial of service. The CNVD/CVE records confirm the vulnerable product/version and the attack vec...

CVE-2017-8282

CVE-2017-8282 affects XnView Classic for Windows v2.40: a crafted .mov file can be mishandled during the Browser mode directory open, leading to code execution via a User-Mode Write AV near NULL in XnView.exe. Public sources (NVD/CNVD/OpenVAS) describe remote code execution with user-assisted ent...

CVE-2017-10739

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000000c1b541c called from xnview+0x00000000003826ec."...

CVE-2017-10760

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

CVE-2017-10761

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x0000000000000429."...

CVE-2017-10759

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInsertDependencyRecord+0x0000000000000039."...

CVE-2017-10752

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-10771

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCreateSplitBlock+0x0000000000000510."...