CVE-2017-14291

STDU Viewer 1.6.375 is affected by CVE-2017-14291. A crafted .jb2 file can lead to arbitrary code execution or denial of service, linked to a User Mode Write AV at STDUJBIG2File!DllUnregisterServer+0x76d8. Multiple sources (NVD/CNVD/CVELIST) confirm the vulnerability and impact, with local attack...

CVE-2017-14270

XnView Classic for Windows 2.40 is affected by an arbitrary code execution/DoS vulnerability triggered by a specially crafted .jb2 file. The issue is associated with a user-mode write condition described as starting at ntdll_77400000!RtlFillMemoryUlong+0x… and is documented in multiple sources (e...

CVE-2017-14310

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000001869."...

CVE-2017-14290

STDU Viewer 1.6.375 is affected by a heap-corruption vulnerability exploitable via a specially crafted .jb2 file, leading to arbitrary code execution or denial of service. The issue is referenced across multiple sources (e.g., CVE-2017-14290/NVD), noting the root cause involves a heap corruption ...

CVE-2017-14288

CVE-2017-14288 affects STDU Viewer 1.6.375. The vulnerability arises from a buffer overflow triggered by a specially crafted .jb2 file, related to a problematic operation noted as a “User Mode Write AV” at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7. Affected code can allow an attacker to ...

CVE-2017-14296

CVE-2017-14296 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a specially crafted .jb2 file, leading to arbitrary code execution or a denial of service via data from a faulting address in STDUJBIG2File!DllGetClassObject. The connected CNVD/NVD entries describe the same issue w...

CVE-2017-14303

STDU Viewer 1.6.375 is affected by a vulnerability that can be triggered by a specially crafted .jb2 file. According to multiple sources, this may cause a denial of service and potentially other unspecified impact due to a Read Access Violation in STDUJBIG2File!DllGetClassObject (starting at that...

CVE-2017-14290

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-14302

STDU Viewer 1.6.375 is affected by a vulnerability where processing a specially crafted .jb2 file can cause a denial of service (and possibly other impact). CNVD catalogs this as a buffer overflow in STDU Viewer related to JBIG2 file handling, while NVD describes the issue as a DoS/impact via a c...

CVE-2017-14289

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000303e."...

CVE-2017-14286

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000cb8c."...

CVE-2017-14293

STDU Viewer 1.6.375 is affected by CVE-2017-14293 due to a crafted .jb2 file triggering a heap corruption condition in wow64!Wow64LdrpInitialize, enabling arbitrary code execution or a denial of service. The vulnerability is a buffer/heap-based overflow in the STDU Viewer component handling JB2 f...

CVE-2017-14272

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000595d."...

CVE-2017-14306

CVE-2017-14306 affects STDU Viewer 1.6.375 via crafted .jb2 files. The root cause is a read access violation in STDUJBIG2File during DllUnregisterServer, leading to denial of service and potentially additional impact. Public sources in connected documents describe a buffer/access violation vulner...

CVE-2017-14273

XnView Classic for Windows v2.40 is affected by CVE-2017-14273. A crafted .jb2 file can lead to arbitrary code execution or a denial of service. The description attributes the issue to a memory-write vulnerability in user-mode code starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x… (User ...

CVE-2017-14295

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File+0x00000000000015e9."...

CVE-2017-14287

STDU Viewer 1.6.375 is affected by CVE-2017-14287. A crafted .jb2 file can trigger a Read Access Violation in STDUJBIG2File, leading to arbitrary code execution or a denial of service. CVSSv3 indicates a high impact (7.8) with local access, no user interaction required, and high impact to confide...

CVE-2017-14288

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7."...

CVE-2017-14270

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlFillMemoryUlong+0x0000000000000010."...

CVE-2017-14273

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlInterlockedPopEntrySList+0x00000000000003b0."...