CVE-2017-9904

CVE-2017-9904 affects XnView Classic for Windows v2.40, where processing of a crafted .fpx file can trigger a denial of service and potentially other impact. The connected documents corroborate that the flaw is associated with how a faulting address/heap handling is involved in ntdll, leading to ...

CVE-2017-10764

XnView Classic for Windows Version 2.40 is vulnerable to a denial-of-service (and possibly other impact) via a crafted .rle file. The CVE description links the issue to Data from Faulting Address controlling Branch Selection starting at COMCTL32!Tab_OnGetItem+0x2f, indicating a potential fault-ad...

CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10752

CVE-2017-10752 affects XnView Classic for Windows (v2.40). A crafted .rle file may cause denial of service and potentially other unspecified impact due to triggering a faulting address path: Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x0000...

CVE-2017-10759

XnView Classic for Windows is affected (v2.40). A crafted .rle file may trigger a denial of service and potentially additional impact, with the underlying issue tied to Data from Faulting Address influencing control flow at ntdll_77df0000!LdrpInsertDependencyRecord+0x39. Public CVE entry CVE-2017...

CVE-2017-9910

XnView Classic for Windows 2.40 is affected by CVE-2017-9910. A buffer overflow vulnerability exists that can be triggered by a specially crafted FPX file, allowing a remote attacker to cause a denial of service (and potentially other impact). The CNVD entry explicitly notes the buffer overflow a...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-9900

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."...

CVE-2017-9907

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."...

CVE-2017-9904

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9906

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-10748

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

CVE-2017-10746

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10743

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...

CVE-2017-10736

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-10738

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."...

CVE-2017-10777

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24."...

CVE-2017-10778

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000233125."...