CVE-2017-10738

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."...

CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...