CVE-2017-9913

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!TpAllocCleanupGroup+0x00000000000003d7."...

CVE-2017-9909

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."...

CVE-2017-9911

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx+0x0000000000010e81...

CVE-2017-9900

XnView Classic for Windows 2.40 is affected by a remote code execution vulnerability via crafted .fpx files. The issue is described as a buffer/flow control problem where Data from Faulting Address influences code flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385. Impact is high (per CVE-...

CVE-2017-9907

CVE-2017-9907 affects XnView Classic for Windows 2.40. A remote attacker can cause a denial of service (and possibly unspecified other impact) by providing a specially crafted FPX file. The issue is related to stack corruption starting at Xfpx!gffGetFormatInfo+0x... as described in the NVD entry ...

CVE-2017-9908

CVE-2017-9908 affects XnView Classic for Windows 2.40 . The vulnerability allows a remote attacker to cause a denial of service (and possibly other impacts) by opening a specially crafted .fpx file, related to a Read Access Violation at Xfpx+0x…d6da. Public references in the connected data confir...

CVE-2017-10762

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x000000000000042f."...

CVE-2017-10747

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."...

CVE-2017-10748

CNVD-2017-19919 and NVD entry CVE-2017-10748 describe a buffer overflow in XnView Classic for Windows 2.40 that can be triggered by a specially crafted .rle file, enabling arbitrary code execution or denial of service. The CNVD/CVE records confirm the vulnerable product/version and the attack vec...

CVE-2017-10749

CVE-2017-10749 affects XnView Classic for Windows 2.40. A buffer overflow in handling a crafted .rle file could allow arbitrary code execution or a denial of service, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x... The OpenVAS entry notes multiple vulnerabili...

CVE-2017-10749

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10745

CVE-2017-10745 affects XnView Classic for Windows, v2.40. The vulnerability is a stack buffer overrun triggered by a specially crafted .rle file, leading to arbitrary code execution or denial of service. Root cause is a stack overflow/GS exception in ntdll_77df0000!RtlProcessFlsData+0x..; this is...

CVE-2017-10752

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-10751

CVE-2017-10751 affects XnView Classic for Windows, version 2.40. A crafted .rle file may cause a denial of service and possibly other impact, related to data from a faulting address that controls branch selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133. The available connected...

CVE-2017-10780

CVE-2017-10780 affects XnView Classic for Windows (Version 2.40). The vulnerability arises from handling of a crafted .rle file, with the description indicating a denial of service and possible unspecified impact due to “Data from Faulting Address controls Branch Selection starting at xnview+0x00...

CVE-2017-10775

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb."...

CVE-2017-10776

XnView Classic for Windows (Version 2.40) is affected by a buffer overflow vulnerability reported in CNVD-2017-14515. The issue can be triggered by processing a specially crafted .rle file, potentially leading to a denial of service. Other connected sources reference the same CVE (CVE-2017-10776)...

CVE-2017-10777

CVE-2017-10777 affects XnView Classic for Windows 2.40. Connected sources indicate a vulnerability in the .rle file handling that can cause a denial of service via a crafted .rle file, attributed to a buffer overflow in parsing such files. Public references (CNVD-2017-14516, NVD entry) describe t...

CVE-2017-10781

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByName+0x00000000000000a5."...

CVE-2017-10782

XnView Classic for Windows (Version 2.40) is affected by a vulnerability triggered by a crafted .rle file, which can cause a denial of service and potentially other impact. The root cause is associated with heap handling, described as Data from Faulting Address controlling Branch Selection starti...