CVE-2017-14556

STDU Viewer 1.6.375 contains a buffer overflow vulnerability in the handling of .djvu files (STDU Viewer Buffer Overflow). The issue arises from a flaw in processing a crafted .djvu file, enabling a local attacker to execute arbitrary code or cause a denial of service. Connected sources (CNVD-201...

CVE-2017-14552

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability described in CNVD-2017-30319 and related records. The flaw allows a local attacker to exploit a specially crafted .djvu file to execute arbitrary code or cause a denial of service. The root cause is a buffer overflow in STDU Viewe...

CVE-2017-14555

Summary (CVE-2017-14555) STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability caused by a buffer overflow when processing crafted .djvu files. The issue is tied to data from a faulting address being used as arguments in a subsequent function call beginning at STDUDjVuF...

CVE-2017-14572

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b."...

CVE-2017-14579

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Control Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000005b70."...

CVE-2017-14568

CVE-2017-14568 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a crafted .xps file, enabling a local attacker to execute arbitrary code or cause a denial of service, as described by multiple sources (e.g., CNVD/NVD entries) referencing an Illegal Instruction Violation related t...

CVE-2017-14549

STDU Viewer 1.6.375 is affected by a local, heap-based buffer overflow in a crafted .djvu file, leading to arbitrary code execution or denial of service. This vulnerability is described as a heap corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d. Multiple sources (NVD/CNVD/CVELI...

CVE-2017-14565

STDU Viewer 1.6.375 is affected by a local, user-assisted vulnerability (buffer overflow/possible stack corruption) that can be triggered by processing a specially crafted .xps file. The issue can lead to a denial of service and potentially other unspecified impacts as described in multiple sourc...

CVE-2017-14557

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f."...

CVE-2017-14569

STDU Viewer 1.6.375 has a buffer overflow vulnerability affecting XPS handling. A crafted .xps file can trigger a Read Access Violation in STDUXPSFile!DllUnregisterServer+0x5bd5, potentially enabling denial of service and related unspecified impact. Documents from NVD/CNVD and related feeds confi...

CVE-2017-14547

STDU Viewer 1.6.375 has a local, crafted .mobi file-triggered buffer overflow (Read Access Violation at STDUMOBIFile!DllUnregisterServer+0x…c0). The vulnerability enables a local attacker to cause a denial of service and potentially other unspecified impact. Connected CNVD-2017-30324 confirms a b...

CVE-2017-14560

STDU Viewer 1.6.375 is vulnerable to a buffer overflow via a specially crafted .xps file (reported in CVE-2017-14560). The issue relates to Data from Faulting Address controlling Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x5bd2, potentially allowing a local attacker to cause a ...

CVE-2017-14555

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-14564

STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability via crafted .xps files. The issue is described as a buffer overflow in STDU Viewer (CNVD-2017-30289; NVD entry CVE-2017-14564) with the faulting address affecting the Branch Selection starting at STDUXPSFile!DllUnreg...

CVE-2017-14550

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8."...

CVE-2017-14567

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .xps file, with an attacker able to execute arbitrary code or cause a denial of service. The issue is linked to an Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnr...

CVE-2017-14562

CVE-2017-14562 affects STDU Viewer 1.6.375. A buffer overflow vulnerability in processing .xps files can allow a local attacker to cause a denial of service (and possibly other impact) as described in CNVD/NVD entries, with exploitation tied to a crafted .xps payload (error code 0xe06d7363 at wow...

CVE-2017-14550

CVE-2017-14550 affects STDU Viewer 1.6.375. The vulnerability relates to processing crafted .djvu files and is tied to a possible stack corruption in STDUDjVuFile!DllUnregisterServer+0x... which can lead to denial of service and may have unspecified additional impact. The connected CNVD/CNVD-2017...

CVE-2017-14571

STDU Viewer 1.6.375 is affected by a local-buffer overflow vulnerability exploitable via a crafted .xps file, which can lead to arbitrary code execution or a denial of service. The issue is associated with STDUXPSFile!DllUnregisterServer+0x0000000000025706 (Illegal Instruction Violation starting ...

CVE-2017-14579

STDU Viewer 1.6.375 contains a local-buffer overflow vulnerability exploitable via a specially crafted .jb2 file, leading to arbitrary code execution or denial of service. Root cause is a Read Access Violation in the STDUJBIG2File path (DllGetClassObject+0x...); disclosure and impact are stated i...