CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...

CVE-2017-8381

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-8282

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-9900

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."...

CVE-2017-9897

XnView Classic for Windows (v2.40) is affected by a vulnerability leading to remote code execution via crafted .fpx files. Multiple sources describe this issue as a buffer‑overflow type vulnerability rooted in XnView’s handling of FPX data, enabling control flow or memory corruption when parsing ...

CVE-2017-9906

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-9904

CVE-2017-9904 affects XnView Classic for Windows v2.40, where processing of a crafted .fpx file can trigger a denial of service and potentially other impact. The connected documents corroborate that the flaw is associated with how a faulting address/heap handling is involved in ntdll, leading to ...

CVE-2017-9895

CVE-2017-9895 affects XnView Classic for Windows, Version 2.40. The vulnerability lies in the FPX file handling, specifically a Read Access Violation in Xfpx!gffGetFormatInfo, which can be triggered by a crafted .fpx file to cause remote code execution. The connected records corroborate the FPX/R...

CVE-2017-9893

XnView Classic for Windows 2.40 is affected by CVE-2017-9893 due to processing of crafted FPX files, enabling potential remote code execution. The issue arises from a vulnerability in handling FPX data (noted as “User Mode Write AV” around gffGetFormatInfo), with the CVSS3 base score reported as ...

CVE-2017-9897

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab."...

CVE-2017-9907

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-9904

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9910

XnView Classic for Windows 2.40 is affected by CVE-2017-9910. A buffer overflow vulnerability exists that can be triggered by a specially crafted FPX file, allowing a remote attacker to cause a denial of service (and potentially other impact). The CNVD entry explicitly notes the buffer overflow a...

CVE-2017-8781

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue...

CVE-2017-10741

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10773

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at MSCTF!CtfImeCreateThreadMgr+0x00000000000000a8."...

CVE-2017-10762

CVE-2017-10762 affects XnView Classic for Windows, version 2.40. The vulnerability arises from processing a crafted .rle file, where data from a faulting address controls branch selection starting at ntdll_77df0000!RtlpAllocateHeap+0x000000000000042f. This can lead to denial of service and potent...

CVE-2017-9899

XnView Classic for Windows, version 2.40, is affected by CVE-2017-9899. The vulnerability allows remote attackers to execute code via a specially crafted .fpx file, with the fault addressed through control flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388. Evidence across CVE records conf...

CVE-2017-10744

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::sToolTipsWndProc+0x0000000000000032."...