CVE-2017-14295

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability triggered by a specially crafted .jb2 file. The issue allows an attacker to execute arbitrary code or cause a denial of service, with the root cause described as Data from Faulting Address controls Code Flow starting at STDUJBIG2F...

CVE-2017-14302

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllGetClassObject+0x00000000000064d7."...

CVE-2017-14305

STDU Viewer 1.6.375 is affected by CVE-2017-14305. A vulnerability in a crafted .jb2 file can trigger a buffer/related fault condition related to Data from Faulting Address controls Branch Selection at STDUJBIG2File!DllUnregisterServer+0x0000000000005578, enabling denial of service and potentiall...

CVE-2017-14276

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."...

CVE-2017-14296

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6."...

CVE-2017-14284

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77400000!RtlGetCurrentDirectoryU+0x000000000000016c."...

CVE-2017-14308

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd."...

CVE-2017-14286

STDU Viewer 1.6.375 is affected by CVE-2017-14286. A vulnerability in processing specially crafted .jb2 files can lead to arbitrary code execution or a denial of service, related to a User Mode Write AV originating from STDUJBIG2File!DllUnregisterServer+0xcb8c. The issue is a buffer/write conditi...

CVE-2017-14293

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64LdrpInitialize+0x00000000000008e1."...

CVE-2017-14305

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578."...

CVE-2017-7885

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a craft...

Integer overflow

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...