CVE-2017-10774

XnView Classic for Windows (v2.40) is affected by CVE-2017-10774 via crafted .rle files, enabling denial of service and possibly other impact as described by multiple sources. Root cause references Data from Faulting Address controlling Branch Selection at KERNELBASE!FindSortHashNode+0x…; affecte...

CVE-2017-10780

CVE-2017-10780 affects XnView Classic for Windows (Version 2.40). The vulnerability arises from handling of a crafted .rle file, with the description indicating a denial of service and possible unspecified impact due to “Data from Faulting Address controls Branch Selection starting at xnview+0x00...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

CVE-2017-10782

XnView Classic for Windows (Version 2.40) is affected by a vulnerability triggered by a crafted .rle file, which can cause a denial of service and potentially other impact. The root cause is associated with heap handling, described as Data from Faulting Address controlling Branch Selection starti...

CVE-2017-8781

CVE-2017-8781 affects XnView Classic for Windows v2.40. The issue is a stack buffer overrun in the handling of JPEG 2000 files when opening a directory in Browser mode, allowing user‑assisted remote code execution as described in the entry. The connected documents corroborate the vulnerability fa...

CVE-2017-9893

XnView Classic for Windows 2.40 is affected by CVE-2017-9893 due to processing of crafted FPX files, enabling potential remote code execution. The issue arises from a vulnerability in handling FPX data (noted as “User Mode Write AV” around gffGetFormatInfo), with the CVSS3 base score reported as ...

CVE-2017-9901

XnView Classic for Windows 2.40 contains a vulnerability in FPX file handling that permits remote code execution. The root cause is described as Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5, enabling arbitrary code execution if ...

CVE-2017-9903

Affected software: XnView Classic for Windows (Version 2.40). Vulnerability details: Multiple connected sources indicate a buffer/memory corruption issue in .fpx handling that can allow code execution. The NVD description cites remote code execution via a crafted .fpx file (Data from Faulting Add...

CVE-2017-9906

CVE-2017-9906 affects XnView Classic for Windows (version 2.40). The vulnerability is triggered by a crafted .fpx image file, leading to denial of service and possibly unspecified other impact due to a flaw where Data from Faulting Address is used as arguments in a later function call inside Xfpx...

CVE-2017-9913

XnView Classic for Windows 2.40 is vulnerable to a crafted .fpx file that can cause a denial of service and potentially unspecified impact, linked to the data-from-faulting-address control path in ntdll_77df0000!TpAllocCleanupGroup+. This CVE entry (CVE-2017-9913) is described in the NVD record a...

CVE-2017-10770

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCreateSplitBlock+0x000000000000053a."...

CVE-2017-9907

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."...

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-10756

XnView Classic for Windows 2.40 is reported vulnerable to a crafted .rle file that can cause a denial of service and potentially other impacts. The root cause is tied to data from a faulting address affecting branch selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x46. The issue appears i...

CVE-2017-10753

CVE-2017-10753 affects XnView Classic for Windows 2.40. The vulnerability arises from processing a crafted .rle file, potentially allowing denial of service and possibly other unspecified impact. The description references a faulting address control path in ntdll where a DLL mapping branch is sel...

CVE-2017-10769

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" without RPC...

CVE-2017-8282

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-9908

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at Xfpx+0x000000000000d6da."...

CVE-2017-9907

CVE-2017-9907 affects XnView Classic for Windows 2.40. A remote attacker can cause a denial of service (and possibly unspecified other impact) by providing a specially crafted FPX file. The issue is related to stack corruption starting at Xfpx!gffGetFormatInfo+0x... as described in the NVD entry ...