CVE-2017-14283

XnView Classic for Windows Version 2.40 is affected by a vulnerability in the JBIG2 decoder (triggered by a crafted .jb2 file) that can cause a denial of service and potentially other impact. The issue is described as a Read Access Violation starting at jbig2dec+0x0000000000008fe4, indicating a f...

CVE-2017-14279

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...

CVE-2017-14272

CVE-2017-14272 affects XnView Classic for Windows 2.40. A flaw in processing a crafted .jb2 file allows arbitrary code execution or a denial of service via a User Mode Write AV starting at jbig2dec+0x595d. Impact is local with low privileges and no user interaction; CVSS3 base score 7.8 (HIGH). C...

CVE-2017-14277

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005956."...

CVE-2017-14274

XnView Classic for Windows 2.40 is affected by a vulnerability in processing JB2/JBIG2 data that allows arbitrary code execution or denial of service. Root cause: Data from a faulting address controls the subsequent write address in the jbig2dec path (offset around 0x8706). Impact is arbitrary co...

CVE-2017-14275

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-14275. The vulnerability allows arbitrary code execution or denial of service via a specially crafted .jb2 file, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d. The CNVD-2017-3259...

CVE-2017-14283

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000008fe4."...

CVE-2017-14280

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at jbig2dec+0x000000000000571d."...

CVE-2017-14272

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000595d."...

CVE-2017-14276

XnView Classic for Windows 2.40 is affected by CVE-2017-14276. A crafted .jb2 (JBIG2) file can cause a denial of service, with potential additional impact related to stack corruption (jbig2dec+0x0000000000002fbe). CNVD-2017-32597 confirms a DoS via a specially crafted .jb2 file. Affected componen...

CVE-2017-14279

CVE-2017-14279 affects XnView Classic for Windows v2.40. A crafted .jb2 file can trigger a denial of service through a Read Access Violation starting at jbig2dec+0x5643, as described in the CVE entry and corroborated by CNVD-2017-32600/NVD records. The vulnerability is triggered by processing a m...

CVE-2017-14284

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlGetCurrentDirectoryU+0x000000000000016c."...

CVE-2017-14278

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005940."...

CVE-2017-14270

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlFillMemoryUlong+0x0000000000000010."...

CVE-2017-14285

XnView Classic for Windows Version 2.40 is affected by CVE-2017-14285. A crafted .jb2 file can cause a denial of service and potentially other unspecified impact. The vulnerability is triggered during processing of the JB2 image format, related to Data from Faulting Address controls Branch Select...

Aerohive Networks HiveManager Remote Shell Upload Exploit

Exploit for hardware platform in category web applications I. BACKGROUND Aerohive Networks HiveManager Classic Online NMS is a cloud-enabled enterprise-class management system for Aerohive networking products. HiveManager Classic Online offers simple policy creation, firmware upgrades, and...

Aerohive Networks HiveManager Remote Shell Upload

I. BACKGROUND Aerohive Networks HiveManager Classic Online NMS is a cloud-enabled enterprise-class management system for Aerohive networking products. HiveManager Classic Online offers simple policy creation, firmware upgrades, and centralized monitoring of thousands of Aerohive access points,...

CVE-2017-14105

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

CVE-2017-14105

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker – even restricted as a tenant – can add a jsp at...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-22335)

XnView Classic for Windows is a set of image viewing software for the Windows platform. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for Windows. The vulnerability can be exploited to...