Code injection

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."...

PT-2017-19268

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

CVE-2017-9893: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548."...

CVE-2017-9902: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."...

CVE-2017-9900: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."...

PT-2017-19256

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548." Recommendations For...

CVE-2017-9907: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."...

CVE-2017-9905: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at Xfpx!gffGetFormatInfo+0x00000000000228e8."...

CVE-2017-9894: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."...

PT-2017-19269

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. It is related to the use of data from a faulting address in a...

PT-2017-19262

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388...

PT-2017-19265

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91...

PT-2017-19264

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to data from a faulting address controlling subsequent write address starting at...

CVE-2017-9895: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e95."...