470 matches found
CVE-2017-14558
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x0000000000018cc2."...
CVE-2017-14549
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...
CVE-2017-14551
CVE-2017-14551 affects STDU Viewer 1.6.375. A crafted .djvu file can trigger a vulnerability described as a buffer overflow with denial of service and potentially other impacts. The root cause references Data from Faulting Address controlling Branch Selection at STDUDjVuFile!DllUnregisterServer+0...
CVE-2017-14552
STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability described in CNVD-2017-30319 and related records. The flaw allows a local attacker to exploit a specially crafted .djvu file to execute arbitrary code or cause a denial of service. The root cause is a buffer overflow in STDU Viewe...
CVE-2017-14557
STDU Viewer 1.6.375 contains a buffer overflow vulnerability when processing a specially crafted .djvu file, allowing a local attacker to execute arbitrary code or cause a denial of service. This is documented in CNVD-2017-30314 and corroborated by CVE-2017-14557 records. Impact is described as a...
CVE-2017-14554
CVE-2017-14554 affects STDU Viewer 1.6.375. A crafted .djvu file can trigger a denial of service and possibly other impact via a possible stack corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d908. Local attacker access and low attack complexity are indicated; exploitation d...
CVE-2017-14557
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f."...
CVE-2017-14556
STDU Viewer 1.6.375 contains a buffer overflow vulnerability in the handling of .djvu files (STDU Viewer Buffer Overflow). The issue arises from a flaw in processing a crafted .djvu file, enabling a local attacker to execute arbitrary code or cause a denial of service. Connected sources (CNVD-201...
CVE-2017-14553
CVE-2017-14553 affects STDU Viewer 1.6.375. A buffer overflow vulnerability exists when handling a crafted .djvu file, related to a location in STDUDjVuFile!DllUnregisterServer+0x00000000000085f5, which could allow a local attacker to execute arbitrary code or cause a denial of service. The conne...
CVE-2017-14548
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d."...
CVE-2017-14550
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8."...
CVE-2017-14549
STDU Viewer 1.6.375 is affected by a local, heap-based buffer overflow in a crafted .djvu file, leading to arbitrary code execution or denial of service. This vulnerability is described as a heap corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d. Multiple sources (NVD/CNVD/CVELI...
STDU Viewer Buffer Overflow Vulnerability (CNVD-2017-30116)
STDU Viewer is a free file viewer that supports multiple formats. The program supports TIFF, PDF, DjVu, XPS and WWF formats. A security vulnerability exists in STDU Viewer version 1.6.375. The vulnerability can be exploited to execute arbitrary code or cause a denial of service with the help of a...
minidjvu denial of service vulnerability (CNVD-2017-25767)
minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the rowisempty function in base/4bitmap.c:272 in Minidjvu. A...
minidjvu denial of service vulnerability (CNVD-2017-25770)
minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the mdjvubitmapgetboundingbox function in base/4bitmap.c in...
minidjvu denial of service vulnerability
minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the JB2BitmapCoder::coderowbyrefinement function in...
Code injection
The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...
CVE-2017-12441
The rowisempty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...