CVE-2017-10744

XnView Classic for Windows (version 2.40) is affected by CVE-2017-10744. The vulnerability arises when parsing a specially crafted .rle file, causing a Read Access Violation in COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x... which can lead to arbitrary code execution or a denial of service. The av...

CVE-2017-10744

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::sToolTipsWndProc+0x0000000000000032."...