CVE-2017-9896

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."...

CVE-2017-9896

XnView Classic for Windows 2.40 is vulnerable to remote code execution via crafted .fpx files, caused by a Read Access Violation on control flow in gffGetFormatInfo. Affected software is XnView Classic for Windows; vulnerability details are corroborated by CVE-2017-9896 records in NVD and CNVD/Op...