CVE-2017-9904

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9913

XnView Classic for Windows 2.40 is vulnerable to a crafted .fpx file that can cause a denial of service and potentially unspecified impact, linked to the data-from-faulting-address control path in ntdll_77df0000!TpAllocCleanupGroup+. This CVE entry (CVE-2017-9913) is described in the NVD record a...

CVE-2017-10776

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll77df0000!LdrShutdownProcess+0x0000000000000130."...

CVE-2017-9912

XnView Classic for Windows (version 2.40) is affected by CVE-2017-9912 due to a buffer/denial-of-service condition triggered by a crafted .fpx file. The root cause is described as data from a faulting address impacting a heap-free path (ntdll_77df0000!RtlpFreeHeap+0x...); the impact is a remote d...

CVE-2017-9898

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."...

CVE-2017-9529

CVE-2017-9529 affects XnView Classic for Windows, version 2.40. Multiple connected sources confirm a buffer overflow in FPX file handling that can be triggered by a remote attacker via a specially crafted .fpx file, leading to remote code execution on the affected host. The underlying cause is an...

CVE-2017-10769

XnView Classic for Windows 2.40 is affected by a vulnerability triggered by a crafted .rle file, leading to denial of service and potentially other impact. The issue is associated with data from a faulting address influencing Branch Selection starting at ntdll_77df0000!memcmp, without RPC initial...

CVE-2017-9914

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b."...

CVE-2017-10778

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000233125."...

CVE-2017-10776

XnView Classic for Windows (Version 2.40) is affected by a buffer overflow vulnerability reported in CNVD-2017-14515. The issue can be triggered by processing a specially crafted .rle file, potentially leading to a denial of service. Other connected sources reference the same CVE (CVE-2017-10776)...

CVE-2017-10783

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

CVE-2017-10743

XnView Classic for Windows 2.40 is vulnerable to a buffer-overrun in a crafted .rle file, related to a Stack Buffer Overrun at ntdll_77df0000!LdrpInitializeNode. This can allow arbitrary code execution or a denial of service. No remediation details are provided in the documents.

CVE-2017-9894

CVE-2017-9894 affects XnView Classic for Windows v2.40. The vulnerability arises when processing crafted FPX files, enabling remote code execution due to a fault described as a User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272. NVD metrics indicate a high-severity impact (CV...

CVE-2017-10765

CVE-2017-10765 affects XnView Classic for Windows version 2.40. A crafted .rle file may cause a denial of service and potentially other impact due to control of branch selection from a faulting address in IMM32, per the NVD entry. CVSS metrics indicate a local, low-complexity exploit with no auth...

CVE-2017-10763

Affected software: XnView Classic for Windows, version 2.40. Vulnerability type / impact: processing a crafted .rle file may cause a denial of service and possibly other unspecified impact, with the fault pointing to Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!...

CVE-2017-8381

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-8781

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...

CVE-2017-10738

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."...

CVE-2017-9912

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

CVE-2017-10763

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."...