CVE-2017-9896

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."...

CVE-2017-10763

Affected software: XnView Classic for Windows, version 2.40. Vulnerability type / impact: processing a crafted .rle file may cause a denial of service and possibly other unspecified impact, with the fault pointing to Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!...

CVE-2017-8282

CVE-2017-8282 affects XnView Classic for Windows v2.40: a crafted .mov file can be mishandled during the Browser mode directory open, leading to code execution via a User-Mode Write AV near NULL in XnView.exe. Public sources (NVD/CNVD/OpenVAS) describe remote code execution with user-assisted ent...

CVE-2017-8381

XnView Classic for Windows 2.40 is affected by CVE-2017-8381. The flaw allows a user-assisted remote attacker to execute code by opening a crafted .mkv file, triggered during the handling of a directory in Browser mode due to a User Mode Write AV near NULL in XnView.exe. Impact described as remot...

CVE-2017-10759

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInsertDependencyRecord+0x0000000000000039."...

CVE-2017-10763

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

CVE-2017-10761

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x0000000000000429."...

CVE-2017-10760

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...

CVE-2017-10742

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from...

CVE-2017-10740

Summary: CVE-2017-10740 affects XnView Classic for Windows (version 2.40). A buffer overflow can be triggered by a specially crafted .rle file, potentially allowing a local attacker to execute arbitrary code or cause a denial of service. The documented root cause references a User Mode Write AV s...

CVE-2017-9894

CVE-2017-9894 affects XnView Classic for Windows v2.40. The vulnerability arises when processing crafted FPX files, enabling remote code execution due to a fault described as a User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272. NVD metrics indicate a high-severity impact (CV...

CVE-2017-9894

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."...

CVE-2017-9898

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."...

CVE-2017-9906

CVE-2017-9906 affects XnView Classic for Windows (version 2.40). The vulnerability is triggered by a crafted .fpx image file, leading to denial of service and possibly unspecified other impact due to a flaw where Data from Faulting Address is used as arguments in a later function call inside Xfpx...

CVE-2017-9912

XnView Classic for Windows (version 2.40) is affected by CVE-2017-9912 due to a buffer/denial-of-service condition triggered by a crafted .fpx file. The root cause is described as data from a faulting address impacting a heap-free path (ntdll_77df0000!RtlpFreeHeap+0x...); the impact is a remote d...

CVE-2017-9912

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

CVE-2017-9913

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!TpAllocCleanupGroup+0x00000000000003d7."...

CVE-2017-9909

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."...