PT-2017-19257

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272." Recommendations For...

PT-2017-11452

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d80."...

CVE-2017-8826: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpegmemterm function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly...

CVE-2017-10748: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

PT-2017-18304

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode. This is due to a "User Mode Wri...

PT-2017-17978

Name of the Vulnerable Software and Affected Versions WinDjView version 2.1 Description The issue allows user-assisted attackers to execute code via a crafted .djvu file, because of a "User Mode Write AV near NULL" in WinDjView.exe. A possible threat model involves a victim obtaining an untrusted...

PT-2017-18513

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit Description The issue allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue. Recommendations For IrfanView version 4.44 32bit, at the moment, there is no...

PT-2017-18997

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin 4.46 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x000000000000176c."...

PT-2017-19260

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab." Recommendations For version 2.40, updat...

CVE-2017-9533: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000a9b."...

CVE-2017-9874: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000007822."...

CVE-2017-10737: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."...

CVE-2017-8766: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue...

CVE-2017-8282: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-9898: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."...

CVE-2017-9893: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548."...

PT-2017-11457

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "User Mode Write AV starting at msvcrt! VEC...

PT-2017-11451

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96."...

CVE-2017-10747: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."...

PT-2017-19261

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb." Recommendations For XnView Classic for...