CVE-2017-14303: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x0000000000003047."...

PT-2017-13369

Name of the Vulnerable Software and Affected Versions STDU Viewer version 1.6.375 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. This is related to data from the faulting address controlling subsequent write address starting ...

CVE-2017-14297: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000002f35."...

CVE-2017-14276: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Possible Stack Corruption starting at jbig2dec+0x0000000000002fbe."...

PT-2017-13363

Name of the Vulnerable Software and Affected Versions STDU Viewer version 1.6.375 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64LdrpInitialize+0x00000000000008e1."...

CVE-2017-14301: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d3."...

CVE-2017-14290: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

PT-2017-13343

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. This is related to a "User Mode Write AV near NULL starting at...

CVE-2017-14274: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008706."...

CVE-2017-14300: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x0000000000004479."...

CVE-2017-14305: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578."...

CVE-2017-14296: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6."...

CVE-2017-14291: Improper Restriction of Operations within the Bounds of a Memory Buffer

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d8."...

PT-2017-13374

Name of the Vulnerable Software and Affected Versions STDU Viewer version 1.6.375 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file. This is related to a "Read Access Violation" error. Recommendations For STDU...

CVE-2017-7885

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a craft...

Integer overflow

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...