CVE-2017-10741

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10730

Affected product: IrfanView 4.44 (32‑bit). Technical details from connected docs show a buffer overflow in the image formats, notably the .rle parser, and multiple local/exploitable vulnerabilities in IrfanView 4.44 with FPX/TOOLs plugins and other formats (PDF, SVG, DJVU, etc.). Root causes invo...

CVE-2017-10733

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031."...

CVE-2017-10777

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24."...

CVE-2017-10731

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d80."...

CVE-2017-10755

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInitializeThread+0x000000000000010b."...

CVE-2017-10732

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x0000000000000429."...

CVE-2017-10729

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

CVE-2017-10783

XnView Classic for Windows (Version 2.40) is affected by CVE-2017-10783 via a crafted .rle file. The root cause is described as data from a faulting address influencing Branch Selection beginning at ntdll_77df0000!RtlpFreeHeap+0x393, leading to a denial of service and potentially unspecified othe...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

CVE-2017-10764

XnView Classic for Windows Version 2.40 is vulnerable to a denial-of-service (and possibly other impact) via a crafted .rle file. The CVE description links the issue to Data from Faulting Address controlling Branch Selection starting at COMCTL32!Tab_OnGetItem+0x2f, indicating a potential fault-ad...

CVE-2017-10754

CVE-2017-10754 affects XnView Classic for Windows v2.40. A crafted .rle file may trigger a denial of service (and potentially unspecified impact) due to a buffer overflow related to Data from Faulting Address and control flow in ntdll. CNVD describes a buffer overflow vulnerability in XnView Clas...

CVE-2017-10773

CVE-2017-10773 affects XnView Classic for Windows (version 2.40). The available descriptions indicate a denial-of-service condition triggered by processing a specially crafted .rle file, related to control flow starting at MSCTF!_CtfImeCreateThreadMgr. The vulnerability is local in scope with low...

CVE-2017-10738

The CVE-2017-10738 entry concerns XnView Classic for Windows (v2.40). A crafted .rle file can trigger a Data Execution Prevention violation that allows arbitrary code execution or denial of service, via code path starting at a symbol in KERNELBASE!CompareStringW. The primary affected component is...

CVE-2017-10745

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10738

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."...

CVE-2017-10746

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10734

CVE-2017-10734 affects IrfanView 4.44 (32-bit). The vulnerability is a buffer/handle issue during .rle processing, with the description noting that a crafted .rle file may cause denial of service or unspecified impact, tied to an invalid handle in wow64. CNVD-2017-14159 corroborates a .rle buffer...

CVE-2017-10755

XnView Classic for Windows 2.40 is affected by CVE-2017-10755. A crafted .rle file may cause a denial of service and potentially other impact, connected to Data from Faulting Address influencing Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b. The CVSS3 base sc...