CVE-2017-8381

XnView Classic for Windows 2.40 is affected by CVE-2017-8381. The flaw allows a user-assisted remote attacker to execute code by opening a crafted .mkv file, triggered during the handling of a directory in Browser mode due to a User Mode Write AV near NULL in XnView.exe. Impact described as remot...

CVE-2017-9529

CVE-2017-9529 affects XnView Classic for Windows, version 2.40. Multiple connected sources confirm a buffer overflow in FPX file handling that can be triggered by a remote attacker via a specially crafted .fpx file, leading to remote code execution on the affected host. The underlying cause is an...

CVE-2017-10759

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInsertDependencyRecord+0x0000000000000039."...

CVE-2017-10756

XnView Classic for Windows 2.40 is reported vulnerable to a crafted .rle file that can cause a denial of service and potentially other impacts. The root cause is tied to data from a faulting address affecting branch selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x46. The issue appears i...

CVE-2017-10763

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

CVE-2017-10761

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x0000000000000429."...

CVE-2017-10760

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...

CVE-2017-10742

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-10743

XnView Classic for Windows 2.40 is vulnerable to a buffer-overrun in a crafted .rle file, related to a Stack Buffer Overrun at ntdll_77df0000!LdrpInitializeNode. This can allow arbitrary code execution or a denial of service. No remediation details are provided in the documents.

CVE-2017-10744

XnView Classic for Windows (version 2.40) is affected by CVE-2017-10744. The vulnerability arises when parsing a specially crafted .rle file, causing a Read Access Violation in COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x... which can lead to arbitrary code execution or a denial of service. The av...

CVE-2017-10740

Summary: CVE-2017-10740 affects XnView Classic for Windows (version 2.40). A buffer overflow can be triggered by a specially crafted .rle file, potentially allowing a local attacker to execute arbitrary code or cause a denial of service. The documented root cause references a User Mode Write AV s...

CVE-2017-9894

CVE-2017-9894 affects XnView Classic for Windows v2.40. The vulnerability arises when processing crafted FPX files, enabling remote code execution due to a fault described as a User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272. NVD metrics indicate a high-severity impact (CV...

CVE-2017-9894

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."...

CVE-2017-9896

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."...

CVE-2017-9898

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."...

CVE-2017-9906

CVE-2017-9906 affects XnView Classic for Windows (version 2.40). The vulnerability is triggered by a crafted .fpx image file, leading to denial of service and possibly unspecified other impact due to a flaw where Data from Faulting Address is used as arguments in a later function call inside Xfpx...

CVE-2017-9912

XnView Classic for Windows (version 2.40) is affected by CVE-2017-9912 due to a buffer/denial-of-service condition triggered by a crafted .fpx file. The root cause is described as data from a faulting address impacting a heap-free path (ntdll_77df0000!RtlpFreeHeap+0x...); the impact is a remote d...

CVE-2017-9912

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...