CVE-2017-9529

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."...

CVE-2017-9529

CVE-2017-9529 affects XnView Classic for Windows, version 2.40. Multiple connected sources confirm a buffer overflow in FPX file handling that can be triggered by a remote attacker via a specially crafted .fpx file, leading to remote code execution on the affected host. The underlying cause is an...