CVE-2019-13261

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384...

CVE-2019-17253

IrfanView 4.53 allows a User Mode Write AV starting at JPEGLS+0x000000000000a6b8...

CVE-2019-13256

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849...

CVE-2019-13262

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb...

FastStone Image Viewer <= 7.5 Multiple Vulnerabilities

The version of FastStone Image Viewer installed on the remote Windows host is prior to or equal to 7.5. It is, therefore, affected by multiple vulnerabilities: - Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. CVE-2022-36947 - A user mo...

CVE-2020-23553

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...

CVE-2020-23560

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000001bcab...

CVE-2020-23555: Out-of-bounds Write

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e...

PT-2022-8662

Name of the Vulnerable Software and Affected Versions IrfanView version 4.54 Description The issue allows a user-mode write access violation. This occurs starting at FORMATS!GetPlugInInfo+0x0000000000007e30. Recommendations For IrfanView version 4.54, consider restricting access to the...

CVE-2020-23562: Undefined Security Weakness

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000000aefe...

CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

Code injection

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

CVE-2020-23545

CVE-2020-23545 concerns IrfanView 4.54, where a user-mode write access violation is triggered in FORMAT S!ReadXPM_W at +0x0000000000000531. The provided documents identify the vulnerable component as the ReadXPM_W path in the FORMAT handling, but do not publish specifics on exploit vectors, root ...

CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

CVE-2021-40826: NULL Pointer Dereference

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

PT-2021-7562

Name of the Vulnerable Software and Affected Versions Clementine Music Player versions prior to 1.3.2 Description The issue is related to a User Mode Write Access Violation in the MP3 file parsing functionality. It is triggered when a user opens a crafted MP3 file or loads a remote stream URL tha...

CVE-2021-26235

FastStone Image Viewer = 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code executio...

CVE-2021-26234

FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

Code injection

FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

Code injection

FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...