EUVD-2019-4762

Malware in sbrugna...

EUVD-2017-6071

Malware in sbrugna...

EUVD-2020-16623

Malware in sbrugna...

CVE-2020-23898

A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

CVE-2020-23895

A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23893

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2019-13258

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165...

CVE-2019-17242

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f...

CVE-2019-17252

IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!ReadBadPNG+0x0000000000000115...

CVE-2019-17241

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563...

CVE-2019-13084

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739...

CVE-2019-13245

FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1...

CVE-2018-15814

FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file...

CVE-2019-13252

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDEACDStd!IEPSetColorProfile+0x00000000001172b0...

Buffer overflow

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

CVE-2023-43250

XNSoft Nconvert 7.136 is affected by a buffer overflow triggered by a crafted image file, enabling a User Mode Write AV that could lead to DoS or potentially code execution. The mature CVE entry notes local attack vector and user interaction requirements, with a high impact on confidentiality, in...

CVE-2019-17259

KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!srcnew+0x000000000014d6ee...

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory. This could be exploited using write-AV when writing to a slot of a JavaScript nu...

CVE-2020-23889

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

Design/Logic Flaw

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...