CVE-2017-15780: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."...

CVE-2017-15769: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLPW+0x0000000000001b22."...

PT-2017-14200

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP W+0x0000000000001b22."...

CVE-2017-15764: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0."...

CVE-2017-15781: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."...

PT-2017-14218

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .dwg file. This is related to a "Read Access Violation" error. Recommendations...

CVE-2017-15778: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."...

PT-2017-14169

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...

PT-2017-14205

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .dwg file. This is related to a "Read Access Violation" error. Recommendations...

PT-2017-14210

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts via a crafted .dwg file. This is related to a "Read Access Violation" error. Recommendations...

PT-2017-14168

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...

PT-2017-14181

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

CVE-2017-15738: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."...

CVE-2017-15786: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."...

CVE-2017-15773: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."...

CVE-2017-15750: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0."...

CVE-2017-15742: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."...

PT-2017-14173

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

PT-2017-14182

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

Ruby Psych::Emitter start_document Heap Overflow Vulnerability(CVE-2016-2338)

DESCRIPTION An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase...