CVE-2017-8282

CVE-2017-8282 affects XnView Classic for Windows v2.40: a crafted .mov file can be mishandled during the Browser mode directory open, leading to code execution via a User-Mode Write AV near NULL in XnView.exe. Public sources (NVD/CNVD/OpenVAS) describe remote code execution with user-assisted ent...

CVE-2017-10775

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb."...

CVE-2017-9913

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!TpAllocCleanupGroup+0x00000000000003d7."...

CVE-2017-10762

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x000000000000042f."...

CVE-2017-10764

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!TabOnGetItem+0x000000000000002f."...

CVE-2017-10776

XnView Classic for Windows (Version 2.40) is affected by a buffer overflow vulnerability reported in CNVD-2017-14515. The issue can be triggered by processing a specially crafted .rle file, potentially leading to a denial of service. Other connected sources reference the same CVE (CVE-2017-10776)...

CVE-2017-9905

XnView Classic for Windows 2.40 is affected by CVE-2017-9905: a crafted .fpx file can cause denial of service (and potentially other impact) due to a faulting address handling issue in gffGetFormatInfo. Public references in NVD summarize the vulnerability; OpenVAS aggregates note multiple XnView ...

CVE-2017-9908

CVE-2017-9908 affects XnView Classic for Windows 2.40 . The vulnerability allows a remote attacker to cause a denial of service (and possibly other impacts) by opening a specially crafted .fpx file, related to a Read Access Violation at Xfpx+0x…d6da. Public references in the connected data confir...

CVE-2017-10747

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."...

CVE-2017-10782

XnView Classic for Windows (Version 2.40) is affected by a vulnerability triggered by a crafted .rle file, which can cause a denial of service and potentially other impact. The root cause is associated with heap handling, described as Data from Faulting Address controlling Branch Selection starti...

CVE-2017-10769

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" without RPC...

CVE-2017-9900

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."...

CVE-2017-10748

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-9907

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."...

CVE-2017-10777

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24."...

CVE-2017-10743

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...

CVE-2017-10745

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-9906

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-10760

CVE-2017-10760 concerns XnView Classic for Windows, version 2.40. Affected component: the software’s handling of .rle files, with root cause described as a buffer/handling issue where “Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x…”. Exploitation in th...