Code injection

SWFTools 2013-04-09-1007 on Windows has a "Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x0000000000003e71" issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS Access...

Code injection

FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

Code injection

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."...

CVE-2017-8785

FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2017-8420

SWFTools 2013-04-09-1007 on Windows is affected by a DoS vulnerability where a malformed TTF file mishandled by font2swf causes an access violation (Data from Faulting Address controls Branch Selection at image00000000_00400000+0x0000000000003e71). The issue’s root cause is in the font processing...

CVE-2017-8785

FastStone Image Viewer 6.2 is affected by a vulnerability in FSViewer.exe triggered by malformed JPEG 2000 files, described as “Data from Faulting Address may be used as a return value.” The issue could allow a DoS (Access Violation) and potentially other impact. The available documents confirm t...

CVE-2017-8369

IrfanView version 4.44 32bit has a "Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x00000000000002f3" issue, which might allow attackers to execute arbitrary code via a crafted file...

CVE-2017-8369

CVE-2017-8369 affects IrfanView 4.44 (32-bit). The vulnerability arises from a Data from Faulting Address that controls branch selection during image viewing/thumbnailing (USER32!wvsprintfA+0x...); this can allow arbitrary code execution via a crafted file. Exploitation is noted as malware exists...

CVE-2017-8420

Removed by vendor...

Cross site scripting

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...

CVE-2015-2672

The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstrreplacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service panic by triggering ...

CVE-2015-2672

The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstrreplacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service panic by triggering ...

UBUNTU-CVE-2015-2672

The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstrreplacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service panic by triggering ...

Memory corruption

The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstrreplacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service panic by triggering ...

Windows NT User Mode to Ring 0 Escalation Vulnerability

Exploit for unknown platform in category local exploits ======================================================= Windows NT User Mode to Ring 0 Escalation Vulnerability ======================================================= Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...