CVE-2017-14573

CVE-2017-14573 affects STDU Viewer 1.6.375 through a local buffer overflow in the XPS handling (notably via crafted .xps files, e.g., STDUXPSFile!DllUnregisterServer+0x000000000002566a). This can lead to arbitrary code execution or denial of service. The CNVD/NVD entries describe the vulnerabilit...

CVE-2017-14559

STDU Viewer 1.6.375 contains a buffer overflow vulnerability exploitable via a specially crafted .xps file, enabling a local attacker to execute arbitrary code or cause a denial of service. The root cause is described as a Read Access Violation in the STDUXPSFile module (DllUnregisterServer+0x…5a...

CVE-2017-14574

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490."...

CVE-2017-14571

STDU Viewer 1.6.375 is affected by a local-buffer overflow vulnerability exploitable via a crafted .xps file, which can lead to arbitrary code execution or a denial of service. The issue is associated with STDUXPSFile!DllUnregisterServer+0x0000000000025706 (Illegal Instruction Violation starting ...

CVE-2017-14565

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x00000000038f2fbf called from image0000000000400000+0x0000000000240065."...

CVE-2017-14576

STDU Viewer 1.6.375 has a local-buffer-overflow vulnerability that can be triggered by a specially crafted .xps file, leading to a denial of service. Multiple connected sources (CNVD-2017-30277, NVD/NVD mirrors) corroborate a buffer-overflow issue and DoS impact; exact internal root cause and aff...

CVE-2017-14575

STDU Viewer 1.6.375 is affected by a buffer overflow when processing crafted .xps files, leading to arbitrary code execution or denial of service. The issue is linked to an Illegal Instruction Violation originating from STDUXPSFile!DllUnregisterServer+0x000000000002566c. Multiple sources (NVD/CNV...

CVE-2017-14577

STDU Viewer 1.6.375 is affected by a local buffer overflow vulnerability in .xps handling (as per CNVD-2017-30276 and corroborating CVE-2017-14577 entries). A crafted .xps file can lead to arbitrary code execution or a denial of service. Root cause details are not fully disclosed in the provided ...

CVE-2017-14569

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5."...

CVE-2017-14559

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005af2."...

CVE-2017-14563

STDU Viewer 1.6.375 is affected by a local vulnerability in processing .xps files that can trigger a read access violation in STDUXPSFile!DllUnregisterServer+0x5311, potentially allowing arbitrary code execution or denial of service. The issue is triggered by specially crafted .xps files and is d...

CVE-2017-14572

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b."...

CVE-2017-14566

STDU Viewer 1.6.375 is affected by a buffer overflow when processing specially crafted .xps files, enabling local attackers to execute arbitrary code or cause a denial of service. The vulnerability is described across multiple sources (CNVD-2017-30287, NVD CVE-2017-14566) with the root cause cite...

CVE-2017-14570

STDU Viewer 1.6.375 is affected by a buffer overflow triggered by a crafted .xps file, enabling arbitrary code execution or denial of service. The issue is related to a User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1. Connected sources from CNVD-2017-30283 an...

CVE-2017-14567

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .xps file, with an attacker able to execute arbitrary code or cause a denial of service. The issue is linked to an Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnr...

CVE-2017-14568

CVE-2017-14568 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a crafted .xps file, enabling a local attacker to execute arbitrary code or cause a denial of service, as described by multiple sources (e.g., CNVD/NVD entries) referencing an Illegal Instruction Violation related t...

CVE-2017-14563

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005311."...

CVE-2017-14562

CVE-2017-14562 affects STDU Viewer 1.6.375. A buffer overflow vulnerability in processing .xps files can allow a local attacker to cause a denial of service (and possibly other impact) as described in CNVD/NVD entries, with exploitation tied to a crafted .xps payload (error code 0xe06d7363 at wow...

CVE-2017-14564

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000028657."...

EUVD-2017-2844

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification XPS file. Successful exploitation coul...