CVE-2017-14309

STDU Viewer 1.6.375 is affected by CVE-2017-14309. A crafted .jb2 file can trigger a denial of service and potentially other impact due to a Read Access Violation in STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8. The vulnerability is triggered by processing the JBIG2 data, with exploitatio...

CVE-2017-14304

STDU Viewer 1.6.375 is affected by CVE-2017-14304 via a crafted .jb2 file, causing a Read Access Violation in STDUJBIG2File!DllGetClassObject and resulting in a denial of service with possible unspecified impact. The vulnerability is local, with low attack complexity, and requires no authenticati...

CVE-2017-14310

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .jb2 file. Multiple sources (NVD entry CVE-2017-14310 and CNVD-2017-30269) describe a denial of service and possibly unspecified impact, associated with a Read Access Violation at STDUJBIG2File!DllUnregisterServer+0x1869 an...

CVE-2017-14289

CVE-2017-14289 affects STDU Viewer 1.6.375. A vulnerability in the STDUJBIG2File component (User Mode Write AV at STDUJBIG2File!DllGetClassObject+0x...303e) allows crafted .jb2 files to trigger arbitrary code execution or a denial of service. The provided connected sources confirm the vulnerabili...

CVE-2017-14299

The CVE-2017-14299 entry concerns STDU Viewer 1.6.375. Affected component: the STDUJBIG2File handling (via a crafted .jb2 file). Root cause/trigger: Data from Faulting Address controls subsequent Write Address inside STDUJBIG2File!DllGetClassObject+0x384b, leading to arbitrary code execution or a...

CVE-2017-14303

STDU Viewer 1.6.375 is affected by a vulnerability that can be triggered by a specially crafted .jb2 file. According to multiple sources, this may cause a denial of service and potentially other unspecified impact due to a Read Access Violation in STDUJBIG2File!DllGetClassObject (starting at that...

CVE-2017-14306

CVE-2017-14306 affects STDU Viewer 1.6.375 via crafted .jb2 files. The root cause is a read access violation in STDUJBIG2File during DllUnregisterServer, leading to denial of service and potentially additional impact. Public sources in connected documents describe a buffer/access violation vulner...

CVE-2017-14288

CVE-2017-14288 affects STDU Viewer 1.6.375. The vulnerability arises from a buffer overflow triggered by a specially crafted .jb2 file, related to a problematic operation noted as a “User Mode Write AV” at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7. Affected code can allow an attacker to ...

CVE-2017-14287

STDU Viewer 1.6.375 is affected by CVE-2017-14287. A crafted .jb2 file can trigger a Read Access Violation in STDUJBIG2File, leading to arbitrary code execution or a denial of service. CVSSv3 indicates a high impact (7.8) with local access, no user interaction required, and high impact to confide...

CVE-2017-14292

STDU Viewer 1.6.375 is vulnerable to a crafted .jb2 file that can cause arbitrary code execution or a denial of service. The issue is linked to a User Mode Write AV condition starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e. The CVSS data indicates a LOCAL attack vector with low a...

CVE-2017-14293

STDU Viewer 1.6.375 is affected by CVE-2017-14293 due to a crafted .jb2 file triggering a heap corruption condition in wow64!Wow64LdrpInitialize, enabling arbitrary code execution or a denial of service. The vulnerability is a buffer/heap-based overflow in the STDU Viewer component handling JB2 f...

CVE-2017-14297

STDU Viewer 1.6.375 is reported vulnerable to arbitrary code execution or denial of service via a crafted .jb2 file, due to control-flow manipulation triggered by Data from Faulting Address at STDUJBIG2File!DllGetClassObject+0x2f35. The affected component is STDU Viewer; the vulnerability appears...

CVE-2017-14292

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllUnregisterServer+0x000000000000570e."...

CVE-2017-14297

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls Code Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000002f35."...

CVE-2017-14288

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7."...

CVE-2017-14289

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000303e."...

CVE-2017-14298

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000038e8."...

CVE-2017-14296

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6."...

CVE-2017-14306

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10."...

PT-2017-13371

Name of the Vulnerable Software and Affected Versions STDU Viewer version 1.6.375 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. It is related to data from the faulting address controlling subsequent write address starting at...