CVE-2017-14301

STDU Viewer 1.6.375 is affected by CVE-2017-14301 through a buffer overflow triggered by a specially crafted .jb2 file. The root cause is described as Data from Faulting Address controls subsequent Write Address, starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d3, which can lead to ...

CVE-2017-14297

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000002f35."...

CVE-2017-14289

CVE-2017-14289 affects STDU Viewer 1.6.375. A vulnerability in the STDUJBIG2File component (User Mode Write AV at STDUJBIG2File!DllGetClassObject+0x...303e) allows crafted .jb2 files to trigger arbitrary code execution or a denial of service. The provided connected sources confirm the vulnerabili...

CVE-2017-14294

STDU Viewer 1.6.375 is affected by CVE-2017-14294. A crafted .jb2 file can lead to arbitrary code execution or to a denial of service, with the issue tied to a User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000566e. Documents consistently identify the affected product...

CVE-2017-14284

CVE-2017-14284 affects XnView Classic for Windows 2.40. A crafted .jb2 file can cause a denial of service and possibly other impact, related to data from a faulting address controlling branch selection starting at ntdll!RtlGetCurrentDirectory_U+0x… (details from NVD/CNVD entries). The available c...

CVE-2017-14306

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10."...

CVE-2017-14299

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x000000000000384b."...

CVE-2017-14304

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e0."...

CVE-2017-14274

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008706."...

CVE-2017-14271

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlImpersonateSelfEx+0x000000000000024e."...

CVE-2017-14274

XnView Classic for Windows 2.40 is affected by a vulnerability in processing JB2/JBIG2 data that allows arbitrary code execution or denial of service. Root cause: Data from a faulting address controls the subsequent write address in the jbig2dec path (offset around 0x8706). Impact is arbitrary co...

CVE-2017-14299

The CVE-2017-14299 entry concerns STDU Viewer 1.6.375. Affected component: the STDUJBIG2File handling (via a crafted .jb2 file). Root cause/trigger: Data from Faulting Address controls subsequent Write Address inside STDUJBIG2File!DllGetClassObject+0x384b, leading to arbitrary code execution or a...

CVE-2017-14291

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d8."...

CVE-2017-14279

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000005643."...

CVE-2017-14310

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .jb2 file. Multiple sources (NVD entry CVE-2017-14310 and CNVD-2017-30269) describe a denial of service and possibly unspecified impact, associated with a Read Access Violation at STDUJBIG2File!DllUnregisterServer+0x1869 an...

CVE-2017-14303

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x0000000000003047."...

CVE-2017-14283

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at jbig2dec+0x0000000000008fe4."...

CVE-2017-14276

XnView Classic for Windows 2.40 is affected by CVE-2017-14276. A crafted .jb2 (JBIG2) file can cause a denial of service, with potential additional impact related to stack corruption (jbig2dec+0x0000000000002fbe). CNVD-2017-32597 confirms a DoS via a specially crafted .jb2 file. Affected componen...

CVE-2017-14292

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e."...

CVE-2017-14291

STDU Viewer 1.6.375 is affected by CVE-2017-14291. A crafted .jb2 file can lead to arbitrary code execution or denial of service, linked to a User Mode Write AV at STDUJBIG2File!DllUnregisterServer+0x76d8. Multiple sources (NVD/CNVD/CVELIST) confirm the vulnerability and impact, with local attack...