CVE-2017-10776

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll77df0000!LdrShutdownProcess+0x0000000000000130."...

CVE-2017-9893

XnView Classic for Windows 2.40 is affected by CVE-2017-9893 due to processing of crafted FPX files, enabling potential remote code execution. The issue arises from a vulnerability in handling FPX data (noted as “User Mode Write AV” around gffGetFormatInfo), with the CVSS3 base score reported as ...

CVE-2017-10778

XnView Classic for Windows 2.40 is affected by CVE-2017-10778. A crafted .rle file may cause a denial of service and possibly other unspecified impacts, related to Data from Faulting Address controls Branch Selection (starting at xnview+0x0000000000233125). The CVSS data in the record indicates a...

CVE-2017-10773

CVE-2017-10773 affects XnView Classic for Windows (version 2.40). The available descriptions indicate a denial-of-service condition triggered by processing a specially crafted .rle file, related to control flow starting at MSCTF!_CtfImeCreateThreadMgr. The vulnerability is local in scope with low...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10745

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10736

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-9904

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-10758

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...

CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...

CVE-2017-10742

XnView Classic for Windows (Version 2.40) is vulnerable to arbitrary code execution or denial of service via specially crafted .rle files. The underlying issue is described as a Data Execution Prevention Violation originating from a function path in ntdll during initialization. The affected produ...

CVE-2017-10738

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."...

CVE-2017-10746

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10752

CVE-2017-10752 affects XnView Classic for Windows (v2.40). A crafted .rle file may cause denial of service and potentially other unspecified impact due to triggering a faulting address path: Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x0000...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

CVE-2017-10755

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInitializeThread+0x000000000000010b."...

CVE-2017-10760

CVE-2017-10760 concerns XnView Classic for Windows, version 2.40. Affected component: the software’s handling of .rle files, with root cause described as a buffer/handling issue where “Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x…”. Exploitation in th...

CVE-2017-9904

CVE-2017-9904 affects XnView Classic for Windows v2.40, where processing of a crafted .fpx file can trigger a denial of service and potentially other impact. The connected documents corroborate that the flaw is associated with how a faulting address/heap handling is involved in ntdll, leading to ...

CVE-2017-10764

XnView Classic for Windows Version 2.40 is vulnerable to a denial-of-service (and possibly other impact) via a crafted .rle file. The CVE description links the issue to Data from Faulting Address controlling Branch Selection starting at COMCTL32!Tab_OnGetItem+0x2f, indicating a potential fault-ad...

CVE-2017-9909

XnView Classic for Windows 2.40 is affected by CVE-2017-9909. A crafted .fpx file can cause remote denial of service (and potentially other impact) due to a fault address control in ntdll, specifically referencing RtlAddAccessAllowedAce. Public records describe this as a buffer-overflow style iss...