CVE-2017-9907

CVE-2017-9907 affects XnView Classic for Windows 2.40. A remote attacker can cause a denial of service (and possibly unspecified other impact) by providing a specially crafted FPX file. The issue is related to stack corruption starting at Xfpx!gffGetFormatInfo+0x... as described in the NVD entry ...

CVE-2017-10740

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlRbInsertNodeEx+0x000000000000002d."...

CVE-2017-9914

CVE-2017-9914 affects XnView Classic for Windows (v2.40). The vulnerability allows remote code execution via a specially crafted .bie file, tied to a Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b. This entry indicates a potentially high-impact result (code executio...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10760

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

CVE-2017-10749

CVE-2017-10749 affects XnView Classic for Windows 2.40. A buffer overflow in handling a crafted .rle file could allow arbitrary code execution or a denial of service, related to a User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x... The OpenVAS entry notes multiple vulnerabili...

CVE-2017-9910

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an "Error Code 0xc000041d starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10745

CVE-2017-10745 affects XnView Classic for Windows, v2.40. The vulnerability is a stack buffer overrun triggered by a specially crafted .rle file, leading to arbitrary code execution or denial of service. Root cause is a stack overflow/GS exception in ntdll_77df0000!RtlProcessFlsData+0x..; this is...

CVE-2017-10766

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."...

PT-2017-11464

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "Stack Buffer Overrun /GS Exception starting at ntdll...

PT-2017-11494

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. It is related to "Data from Faulting Address controls Branch...

CVE-2017-8381: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-10774: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040."...

CVE-2017-10749: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-10742: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-10738: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."...

CVE-2017-10745: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10744: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::sToolTipsWndProc+0x0000000000000032."...

CVE-2017-10741: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10776: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll77df0000!LdrShutdownProcess+0x0000000000000130."...