CVE-2017-8282: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe...

CVE-2017-10745: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun /GS Exception starting at ntdll77df0000!RtlProcessFlsData+0x00000000000000b0."...

CVE-2017-10774: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x0000000000000040."...

CVE-2017-10760: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."...

PT-2017-11492

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11500

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selectio...

PT-2017-19277

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .bie file. It is related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b." Recommendations...

PT-2017-19256

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548." Recommendations For...

PT-2017-19259

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to execute code via a crafted .fpx file. It is related to a "Read Access Violation on Control Flow" error. Recommendations For XnView Classic for Windows...

PT-2017-19267

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

PT-2017-19272

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

PT-2017-11465

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. It is related to a "Read Access Violation on Control Flow" error. Recommendations Fo...

PT-2017-11469

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."...

PT-2017-11478

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-11480

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. This is related to "Data from Faulting Address controls Branch...

PT-2017-19268

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.40 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls Branc...

CVE-2017-10736: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!VECmemzero+0x000000000000006a."...

CVE-2017-9906: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-9911: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx+0x0000000000010e81...

CVE-2017-10780: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a."...