CVE-2017-14308

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd."...

CVE-2017-14276

XnView Classic for Windows 2.40 is affected by CVE-2017-14276. A crafted .jb2 (JBIG2) file can cause a denial of service, with potential additional impact related to stack corruption (jbig2dec+0x0000000000002fbe). CNVD-2017-32597 confirms a DoS via a specially crafted .jb2 file. Affected componen...

CVE-2017-14276

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."...

CVE-2017-14306

CVE-2017-14306 affects STDU Viewer 1.6.375 via crafted .jb2 files. The root cause is a read access violation in STDUJBIG2File during DllUnregisterServer, leading to denial of service and potentially additional impact. Public sources in connected documents describe a buffer/access violation vulner...

CVE-2017-14270

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlFillMemoryUlong+0x0000000000000010."...

CVE-2017-14296

CVE-2017-14296 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a specially crafted .jb2 file, leading to arbitrary code execution or a denial of service via data from a faulting address in STDUJBIG2File!DllGetClassObject. The connected CNVD/NVD entries describe the same issue w...

CVE-2017-14294

STDU Viewer 1.6.375 is affected by CVE-2017-14294. A crafted .jb2 file can lead to arbitrary code execution or to a denial of service, with the issue tied to a User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000566e. Documents consistently identify the affected product...

CVE-2017-14271

XnView Classic for Windows v2.40 is affected by CVE-2017-14271. A crafted .jb2 file can lead to arbitrary code execution or a denial of service. The vulnerability is associated with the handling of .jb2 files, tied to a User Mode Write operation in ntdll-related code path mentioned in the CVE des...

CVE-2017-14289

CVE-2017-14289 affects STDU Viewer 1.6.375. A vulnerability in the STDUJBIG2File component (User Mode Write AV at STDUJBIG2File!DllGetClassObject+0x...303e) allows crafted .jb2 files to trigger arbitrary code execution or a denial of service. The provided connected sources confirm the vulnerabili...

CVE-2017-14305

STDU Viewer 1.6.375 is affected by CVE-2017-14305. A vulnerability in a crafted .jb2 file can trigger a buffer/related fault condition related to Data from Faulting Address controls Branch Selection at STDUJBIG2File!DllUnregisterServer+0x0000000000005578, enabling denial of service and potentiall...

CVE-2017-7885

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a craft...

Integer overflow

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...