Design/Logic Flaw

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x0000000002d8024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566c."...

Code injection

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490."...

CVE-2017-14565

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x00000000038f2fbf called from image0000000000400000+0x0000000000240065."...

CVE-2017-14559

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005af2."...

CVE-2017-14564

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000028657."...

CVE-2017-14576

STDU Viewer 1.6.375 has a local-buffer-overflow vulnerability that can be triggered by a specially crafted .xps file, leading to a denial of service. Multiple connected sources (CNVD-2017-30277, NVD/NVD mirrors) corroborate a buffer-overflow issue and DoS impact; exact internal root cause and aff...

CVE-2017-14568

CVE-2017-14568 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a crafted .xps file, enabling a local attacker to execute arbitrary code or cause a denial of service, as described by multiple sources (e.g., CNVD/NVD entries) referencing an Illegal Instruction Violation related t...

CVE-2017-14570

STDU Viewer 1.6.375 is affected by a buffer overflow triggered by a crafted .xps file, enabling arbitrary code execution or denial of service. The issue is related to a User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1. Connected sources from CNVD-2017-30283 an...

CVE-2017-14562

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to an "Error Code 0xe06d7363 starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-14575

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x0000000002d8024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566c."...

CVE-2017-14572

STDU Viewer 1.6.375 is affected by a vulnerability in processing .xps files that can lead to arbitrary code execution or denial of service when a crafted XPS file is opened. The issue is described as a buffer/unsafe write condition (e.g., related to a User Mode Write AV at specific symbols) that ...

CVE-2017-14563

STDU Viewer 1.6.375 is affected by a local vulnerability in processing .xps files that can trigger a read access violation in STDUXPSFile!DllUnregisterServer+0x5311, potentially allowing arbitrary code execution or denial of service. The issue is triggered by specially crafted .xps files and is d...

CVE-2017-14574

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490."...

CVE-2017-14571

STDU Viewer 1.6.375 is affected by a local-buffer overflow vulnerability exploitable via a crafted .xps file, which can lead to arbitrary code execution or a denial of service. The issue is associated with STDUXPSFile!DllUnregisterServer+0x0000000000025706 (Illegal Instruction Violation starting ...

CVE-2017-14572

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b."...

CVE-2017-14576

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x00000000049f0281."...

CVE-2017-14563

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005311."...

CVE-2017-14573

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000030c024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566a."...

CVE-2017-14570

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1."...

CVE-2017-14567

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnregisterServer+0x000000000002e77b."...