CVE-2017-10777

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b24."...

CVE-2017-10743

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!LdrpInitializeNode+0x000000000000015b."...

CVE-2017-10737

CVE-2017-10737 affects XnView Classic for Windows (Version 2.40). The vulnerability is triggered by processing a specially crafted .rle file, leading to arbitrary code execution or a denial of service, related to a memory handling issue in user-mode code (described as starting at ntdll_77df0000!R...

CVE-2017-10747

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."...

CVE-2017-10761

XnView Classic for Windows 2.40 is affected by a vulnerability in RLE file parsing that can cause a denial of service and potentially other impact. The issue is related to a faulting address control flow in ntdll (RtlpAllocateHeap+0x429). Connected sources (CNVD-2017-14499, NVD CVE-2017-10761) co...

CVE-2017-10763: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByHandle+0x0000000000000031."...

CVE-2017-9913: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!TpAllocCleanupGroup+0x00000000000003d7."...

PT-2017-19274

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to the use of data from a faulting address in...

CVE-2017-9903: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...

CVE-2017-10772: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" with RPC initializati...

PT-2017-11495

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-18258

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode. This is due to a "User Mode Wri...

PT-2017-11496

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at...

PT-2017-11491

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11483

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11501

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11497

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll...

PT-2017-11504

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11457

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "User Mode Write AV starting at msvcrt! VEC...

PT-2017-11489

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...