CVE-2017-10778

XnView Classic for Windows 2.40 is affected by CVE-2017-10778. A crafted .rle file may cause a denial of service and possibly other unspecified impacts, related to Data from Faulting Address controls Branch Selection (starting at xnview+0x0000000000233125). The CVSS data in the record indicates a...

CVE-2017-10757

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10757 due to a vulnerability in parsing crafted .rle image files. The issue, described in multiple sources, can cause a denial of service and may have unspecified additional impact, related to Data from Faulting Address controls Br...

CVE-2017-10754

CVE-2017-10754 affects XnView Classic for Windows v2.40. A crafted .rle file may trigger a denial of service (and potentially unspecified impact) due to a buffer overflow related to Data from Faulting Address and control flow in ntdll. CNVD describes a buffer overflow vulnerability in XnView Clas...

CVE-2017-9895

CVE-2017-9895 affects XnView Classic for Windows, Version 2.40. The vulnerability lies in the FPX file handling, specifically a Read Access Violation in Xfpx!gffGetFormatInfo, which can be triggered by a crafted .fpx file to cause remote code execution. The connected records corroborate the FPX/R...

CVE-2017-9893

XnView Classic for Windows 2.40 is affected by CVE-2017-9893 due to processing of crafted FPX files, enabling potential remote code execution. The issue arises from a vulnerability in handling FPX data (noted as “User Mode Write AV” around gffGetFormatInfo), with the CVSS3 base score reported as ...

CVE-2017-10760

CVE-2017-10760 concerns XnView Classic for Windows, version 2.40. Affected component: the software’s handling of .rle files, with root cause described as a buffer/handling issue where “Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x…”. Exploitation in th...

CVE-2017-10747

XnView Classic for Windows (version 2.40) is affected. A crafted .rle file can either execute arbitrary code or cause a denial of service due to a vulnerability described as a User Mode Write AV starting at xnview+0x000000000037a8aa. The primary reliable source (NVD) states LOCAL access with low ...

CVE-2017-10769

XnView Classic for Windows 2.40 is affected by a vulnerability triggered by a crafted .rle file, leading to denial of service and potentially other impact. The issue is associated with data from a faulting address influencing Branch Selection starting at ntdll_77df0000!memcmp, without RPC initial...

CVE-2017-9911

CVE-2017-9911 affects XnView Classic for Windows version 2.40, where processing a crafted FPX file can cause denial of service (and possibly other impact). Root cause described as Data from Faulting Address used as arguments in a subsequent Function Call (starting at Xfpx+0x0000000000010e81). Pub...

CVE-2017-10765

CVE-2017-10765 affects XnView Classic for Windows version 2.40. A crafted .rle file may cause a denial of service and potentially other impact due to control of branch selection from a faulting address in IMM32, per the NVD entry. CVSS metrics indicate a local, low-complexity exploit with no auth...

CVE-2017-10767

XnView Classic for Windows Version 2.40 is affected by a vulnerability that can be triggered by a specially crafted .rle file, potentially causing a denial-of-service and possibly other impact as described in CVE-2017-10767. Public references in CNVD-2017-14512 and NVD detail a buffer-overflow st...

CVE-2017-10746

CVE-2017-10746 affects XnView Classic for Windows 2.40. A buffer overflow in the .rle file handling can be exploited to execute arbitrary code or cause a denial of service, related to a User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012. The vulnerability is ...

CVE-2017-10739

CVE-2017-10739 affects XnView Classic for Windows, version 2.40. A crafted .rle file can lead to arbitrary code execution or a denial of service, due to a Data Execution Prevention Violation starting at an unknown symbol in the program flow. The description does not provide concrete vulnerable co...

CVE-2017-10754

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at...

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

CVE-2017-10737

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...

CVE-2017-10774

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040."...

CVE-2017-10756

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpRemoveUCRBlock+0x0000000000000046."...

CVE-2017-10750

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10744

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::sToolTipsWndProc+0x0000000000000032."...