CVE-2017-9895

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e95."...

CVE-2017-9895

CVE-2017-9895 affects XnView Classic for Windows, Version 2.40. The vulnerability lies in the FPX file handling, specifically a Read Access Violation in Xfpx!gffGetFormatInfo, which can be triggered by a crafted .fpx file to cause remote code execution. The connected records corroborate the FPX/R...