CVE-2017-14548

STDU Viewer 1.6.375 is affected by a local, buffer overflow vulnerability triggered by a crafted .djvu file. The issue arises in a user-mode code path related to DllUnregisterServer, enabling a local attacker to potentially execute arbitrary code or cause a denial of service. The CVE description ...

CVE-2017-14549

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-14552

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability described in CNVD-2017-30319 and related records. The flaw allows a local attacker to exploit a specially crafted .djvu file to execute arbitrary code or cause a denial of service. The root cause is a buffer overflow in STDU Viewe...

CVE-2017-14547

STDU Viewer 1.6.375 has a local, crafted .mobi file-triggered buffer overflow (Read Access Violation at STDUMOBIFile!DllUnregisterServer+0x…c0). The vulnerability enables a local attacker to cause a denial of service and potentially other unspecified impact. Connected CNVD-2017-30324 confirms a b...

CVE-2017-14551

CVE-2017-14551 affects STDU Viewer 1.6.375. A crafted .djvu file can trigger a vulnerability described as a buffer overflow with denial of service and potentially other impacts. The root cause references Data from Faulting Address controlling Branch Selection at STDUDjVuFile!DllUnregisterServer+0...

CVE-2017-14556

STDU Viewer 1.6.375 contains a buffer overflow vulnerability in the handling of .djvu files (STDU Viewer Buffer Overflow). The issue arises from a flaw in processing a crafted .djvu file, enabling a local attacker to execute arbitrary code or cause a denial of service. Connected sources (CNVD-201...

CVE-2017-14567

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .xps file, with an attacker able to execute arbitrary code or cause a denial of service. The issue is linked to an Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnr...

CVE-2017-14564

STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability via crafted .xps files. The issue is described as a buffer overflow in STDU Viewer (CNVD-2017-30289; NVD entry CVE-2017-14564) with the faulting address affecting the Branch Selection starting at STDUXPSFile!DllUnreg...

CVE-2017-14573

CVE-2017-14573 affects STDU Viewer 1.6.375 through a local buffer overflow in the XPS handling (notably via crafted .xps files, e.g., STDUXPSFile!DllUnregisterServer+0x000000000002566a). This can lead to arbitrary code execution or denial of service. The CNVD/NVD entries describe the vulnerabilit...

CVE-2017-14568

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x000000000297024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025630."...

CVE-2017-14569

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5."...

CVE-2017-14577

STDU Viewer 1.6.375 is affected by a local buffer overflow vulnerability in .xps handling (as per CNVD-2017-30276 and corroborating CVE-2017-14577 entries). A crafted .xps file can lead to arbitrary code execution or a denial of service. Root cause details are not fully disclosed in the provided ...

CVE-2017-14579

STDU Viewer 1.6.375 contains a local-buffer overflow vulnerability exploitable via a specially crafted .jb2 file, leading to arbitrary code execution or denial of service. Root cause is a Read Access Violation in the STDUJBIG2File path (DllGetClassObject+0x...); disclosure and impact are stated i...

CVE-2017-14559

STDU Viewer 1.6.375 contains a buffer overflow vulnerability exploitable via a specially crafted .xps file, enabling a local attacker to execute arbitrary code or cause a denial of service. The root cause is described as a Read Access Violation in the STDUXPSFile module (DllUnregisterServer+0x…5a...

CVE-2017-14560

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd2."...

CVE-2017-14561

STDU Viewer 1.6.375 is affected by a buffer overflow in its XPS handling, triggerable by a specially crafted .xps file. A local attacker can exploit this to execute arbitrary code or cause a denial of service . This vulnerability is described in CVE-2017-14561 and corroborated by CNVD-2017-30292;...

CVE-2017-14561

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000048c024d called from STDUXPSFile!DllUnregisterServer+0x0000000000025638."...

CVE-2017-14557

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f."...

CVE-2017-14565

STDU Viewer 1.6.375 is affected by a local, user-assisted vulnerability (buffer overflow/possible stack corruption) that can be triggered by processing a specially crafted .xps file. The issue can lead to a denial of service and potentially other unspecified impacts as described in multiple sourc...

CVE-2017-14543

CVE-2017-14543 affects STDU Viewer 1.6.375. A crafted .epub can cause a denial of service or possibly other unspecified impact due to Data from Faulting Address controlling Branch Selection at STDUEPubFile!DllUnregisterServer+0x0000000000039335. The connected sources confirm the product/version a...