CVE-2017-10744

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::sToolTipsWndProc+0x0000000000000032."...

CVE-2017-10783

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

CVE-2017-10780

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a."...

CVE-2017-10746

CVE-2017-10746 affects XnView Classic for Windows 2.40. A buffer overflow in the .rle file handling can be exploited to execute arbitrary code or cause a denial of service, related to a User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012. The vulnerability is ...

CVE-2017-9895

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e95."...

CVE-2017-9901

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5."...

CVE-2017-9902

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."...

CVE-2017-10750

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

CVE-2017-9898

CVE-2017-9898 affects XnView Classic for Windows (v2.40). The vulnerability allows remote code execution through a crafted .fpx file, tied to a User Mode Write AV starting at a specific FPX parsing offset. The available documents confirm the affected product/version and the exploit vector (remote...

CVE-2017-10765

CVE-2017-10765 affects XnView Classic for Windows version 2.40. A crafted .rle file may cause a denial of service and potentially other impact due to control of branch selection from a faulting address in IMM32, per the NVD entry. CVSS metrics indicate a local, low-complexity exploit with no auth...

CVE-2017-9910

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an "Error Code 0xc000041d starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10779

XnView Classic for Windows Version 2.40 is affected by CVE-2017-10779. A crafted .rle file can cause a denial of service (and possibly other impact) due to memory handling at a faulting address in xnview+0x0000000000013a20. The vulnerability is documented across multiple sources (NVD entry CVE-20...

CVE-2017-9911

CVE-2017-9911 affects XnView Classic for Windows version 2.40, where processing a crafted FPX file can cause denial of service (and possibly other impact). Root cause described as Data from Faulting Address used as arguments in a subsequent Function Call (starting at Xfpx+0x0000000000010e81). Pub...

CVE-2017-8781

CVE-2017-8781 affects XnView Classic for Windows v2.40. The issue is a stack buffer overrun in the handling of JPEG 2000 files when opening a directory in Browser mode, allowing user‑assisted remote code execution as described in the entry. The connected documents corroborate the vulnerability fa...

CVE-2017-10754

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at...

CVE-2017-9908

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at Xfpx+0x000000000000d6da."...

CVE-2017-9902

CVE-2017-9902 affects XnView Classic for Windows (version 2.40). The vulnerability arises in FPX image handling, where a crafted .fpx file can cause remote code execution. The description attributes the issue to Data from Faulting Address controlling Code Flow, starting at Xfpx!gffGetFormatInfo+0...

CVE-2017-9901

XnView Classic for Windows 2.40 contains a vulnerability in FPX file handling that permits remote code execution. The root cause is described as Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5, enabling arbitrary code execution if ...

CVE-2017-9909

XnView Classic for Windows 2.40 is affected by CVE-2017-9909. A crafted .fpx file can cause remote denial of service (and potentially other impact) due to a fault address control in ntdll, specifically referencing RtlAddAccessAllowedAce. Public records describe this as a buffer-overflow style iss...