CVE-2017-14281

XnView Classic for Windows 2.40 is vulnerable via a crafted .jb2 file. The issue arises from Data from Faulting Address being used as arguments in a subsequent function call starting at jbig2dec+0x00000000000090f1, enabling a denial of service (DoS) and possibly other impact. Affected component i...

CVE-2017-14274

XnView Classic for Windows 2.40 is affected by a vulnerability in processing JB2/JBIG2 data that allows arbitrary code execution or denial of service. Root cause: Data from a faulting address controls the subsequent write address in the jbig2dec path (offset around 0x8706). Impact is arbitrary co...

CVE-2017-14273

XnView Classic for Windows v2.40 is affected by CVE-2017-14273. A crafted .jb2 file can lead to arbitrary code execution or a denial of service. The description attributes the issue to a memory-write vulnerability in user-mode code starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x… (User ...

CVE-2017-14282

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005862."...

CVE-2017-14284

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlGetCurrentDirectoryU+0x000000000000016c."...

CVE-2017-14279

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...

CVE-2017-14274

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008706."...

CVE-2017-14285

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlInterlockedPopEntrySList+0x000000000000039b."...

CVE-2017-14278

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005940."...

CVE-2017-14285

XnView Classic for Windows Version 2.40 is affected by CVE-2017-14285. A crafted .jb2 file can cause a denial of service and potentially other unspecified impact. The vulnerability is triggered during processing of the JB2 image format, related to Data from Faulting Address controls Branch Select...

CVE-2017-14277

CVE-2017-14277 affects XnView Classic for Windows de version 2.40. The vulnerability is triggered by a crafted .jb2 file and is caused by a read access violation starting at jbig2dec+0x5956, which can lead to denial of service and potentially unspecified impact. Public documents indicate an impac...

CVE-2017-14279

CVE-2017-14279 affects XnView Classic for Windows v2.40. A crafted .jb2 file can trigger a denial of service through a Read Access Violation starting at jbig2dec+0x5643, as described in the CVE entry and corroborated by CNVD-2017-32600/NVD records. The vulnerability is triggered by processing a m...

CVE-2017-14270

XnView Classic for Windows 2.40 is affected by an arbitrary code execution/DoS vulnerability triggered by a specially crafted .jb2 file. The issue is associated with a user-mode write condition described as starting at ntdll_77400000!RtlFillMemoryUlong+0x… and is documented in multiple sources (e...

CVE-2017-14272

CVE-2017-14272 affects XnView Classic for Windows 2.40. A flaw in processing a crafted .jb2 file allows arbitrary code execution or a denial of service via a User Mode Write AV starting at jbig2dec+0x595d. Impact is local with low privileges and no user interaction; CVSS3 base score 7.8 (HIGH). C...

CVE-2017-14281

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at jbig2dec+0x00000000000090f1."...

CVE-2017-14276

XnView Classic for Windows 2.40 is affected by CVE-2017-14276. A crafted .jb2 (JBIG2) file can cause a denial of service, with potential additional impact related to stack corruption (jbig2dec+0x0000000000002fbe). CNVD-2017-32597 confirms a DoS via a specially crafted .jb2 file. Affected componen...

CVE-2017-14283

XnView Classic for Windows Version 2.40 is affected by a vulnerability in the JBIG2 decoder (triggered by a crafted .jb2 file) that can cause a denial of service and potentially other impact. The issue is described as a Read Access Violation starting at jbig2dec+0x0000000000008fe4, indicating a f...

CVE-2017-14271

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlImpersonateSelfEx+0x000000000000024e."...

CVE-2017-14280

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d."...

CVE-2017-14276

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."...