CVE-2017-10747

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."...

CVE-2017-10782

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x00000000000003ca."...

CVE-2017-10781

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByName+0x00000000000000a5."...

CVE-2017-10775

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb."...

CVE-2017-10772

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" with RPC initializati...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

CVE-2017-10771

XnView Classic for Windows 2.40 is affected by CVE-2017-10771. A crafted .rle file can cause a denial of service and potentially other impact due to how Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x510. The vulnerability arises in the proc...

CVE-2017-9900

XnView Classic for Windows 2.40 is affected by a remote code execution vulnerability via crafted .fpx files. The issue is described as a buffer/flow control problem where Data from Faulting Address influences code flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385. Impact is high (per CVE-...

CVE-2017-10775

CVE-2017-10775 affects XnView Classic for Windows (Version 2.40). A crafted .rle file can trigger a denial of service and potentially other unspecified impact due to a Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb. Root cause indicated is this access violat...

CVE-2017-9906

CVE-2017-9906 affects XnView Classic for Windows (version 2.40). The vulnerability is triggered by a crafted .fpx image file, leading to denial of service and possibly unspecified other impact due to a flaw where Data from Faulting Address is used as arguments in a later function call inside Xfpx...

CVE-2017-10737

CVE-2017-10737 affects XnView Classic for Windows (Version 2.40). The vulnerability is triggered by processing a specially crafted .rle file, leading to arbitrary code execution or a denial of service, related to a memory handling issue in user-mode code (described as starting at ntdll_77df0000!R...

CVE-2017-10756

XnView Classic for Windows 2.40 is reported vulnerable to a crafted .rle file that can cause a denial of service and potentially other impacts. The root cause is tied to data from a faulting address affecting branch selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x46. The issue appears i...

CVE-2017-9908

CVE-2017-9908 affects XnView Classic for Windows 2.40 . The vulnerability allows a remote attacker to cause a denial of service (and possibly other impacts) by opening a specially crafted .fpx file, related to a Read Access Violation at Xfpx+0x…d6da. Public references in the connected data confir...

CVE-2017-10741

CVE-2017-10741 affects XnView Classic for Windows Version 2.40. A crafted .rle file can trigger a buffer overflow, allowing an attacker to execute arbitrary code or cause a denial of service. The issue is related to a “User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000...

CVE-2017-10763

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."...

CVE-2017-10742

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-10763

Affected software: XnView Classic for Windows, version 2.40. Vulnerability type / impact: processing a crafted .rle file may cause a denial of service and possibly other unspecified impact, with the fault pointing to Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!...

CVE-2017-10774

XnView Classic for Windows (v2.40) is affected by CVE-2017-10774 via crafted .rle files, enabling denial of service and possibly other impact as described by multiple sources. Root cause references Data from Faulting Address controlling Branch Selection at KERNELBASE!FindSortHashNode+0x…; affecte...

CVE-2017-10770

CVE-2017-10770 affects XnView Classic for Windows 2.40; a crafted .rle file may cause a denial of service (DoS) and potentially other impact due to data from a faulting address in ntdll, per NVD entry and CNVD-2017-14508 documentation. No patch/version remediation details are provided in the supp...

CVE-2017-9899

XnView Classic for Windows, version 2.40, is affected by CVE-2017-9899. The vulnerability allows remote attackers to execute code via a specially crafted .fpx file, with the fault addressed through control flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388. Evidence across CVE records conf...