74 matches found
CVE-2019-13261
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384...
CVE-2019-17253
IrfanView 4.53 allows a User Mode Write AV starting at JPEGLS+0x000000000000a6b8...
CVE-2019-13256
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849...
CVE-2019-13262
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb...
FastStone Image Viewer <= 7.5 Multiple Vulnerabilities
The version of FastStone Image Viewer installed on the remote Windows host is prior to or equal to 7.5. It is, therefore, affected by multiple vulnerabilities: - Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. CVE-2022-36947 - A user mo...
CVE-2020-23553
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...
CVE-2020-23560
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000001bcab...
CVE-2021-40826
Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...
Code injection
Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...
CVE-2020-23545
CVE-2020-23545 concerns IrfanView 4.54, where a user-mode write access violation is triggered in FORMAT S!ReadXPM_W at +0x0000000000000531. The provided documents identify the vulnerable component as the ReadXPM_W path in the FORMAT handling, but do not publish specifics on exploit vectors, root ...
CVE-2021-40826
Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...
CVE-2021-26234
FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...
CVE-2021-26235
FastStone Image Viewer = 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code executio...
Code injection
FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...
Code injection
FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...
CVE-2021-26237
FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...
CVE-2021-26237
FastStone Image Viewer
CVE-2021-26235
FastStone Image Viewer = 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code executio...
CVE-2021-26234
Affected software: FastStone Image Viewer (FSViewer.exe) up to version 7.5. Issue: a user mode write access violation at 0x00402d8a triggered when opening or viewing a malformed CUR file. Impact (as stated): potential Denial of Service and possible code execution. Attack surface: local exploitati...