CVE-2017-14547

STDU Viewer 1.6.375 has a local, crafted .mobi file-triggered buffer overflow (Read Access Violation at STDUMOBIFile!DllUnregisterServer+0x…c0). The vulnerability enables a local attacker to cause a denial of service and potentially other unspecified impact. Connected CNVD-2017-30324 confirms a b...

CVE-2017-14567

STDU Viewer 1.6.375 is affected by a vulnerability triggered by a crafted .xps file, with an attacker able to execute arbitrary code or cause a denial of service. The issue is linked to an Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnr...

CVE-2017-14577

STDU Viewer 1.6.375 is affected by a local buffer overflow vulnerability in .xps handling (as per CNVD-2017-30276 and corroborating CVE-2017-14577 entries). A crafted .xps file can lead to arbitrary code execution or a denial of service. Root cause details are not fully disclosed in the provided ...

CVE-2017-14288

CVE-2017-14288 affects STDU Viewer 1.6.375. The vulnerability arises from a buffer overflow triggered by a specially crafted .jb2 file, related to a problematic operation noted as a “User Mode Write AV” at STDUJBIG2File!DllGetClassObject+0x0000000000002ff7. Affected code can allow an attacker to ...

CVE-2017-14575

STDU Viewer 1.6.375 is affected by a buffer overflow when processing crafted .xps files, leading to arbitrary code execution or denial of service. The issue is linked to an Illegal Instruction Violation originating from STDUXPSFile!DllUnregisterServer+0x000000000002566c. Multiple sources (NVD/CNV...

CVE-2017-14690

STDU Viewer 1.6.375 is affected by a vulnerability in the JBIG2 handling that allows arbitrary code execution or a denial of service via a crafted .jb2 file. The issue is linked to Data from Faulting Address controlling the subsequent Write Address in STDUJBIG2File!DllGetClassObject+0x64e7, indic...

CVE-2017-14571

STDU Viewer 1.6.375 is affected by a local-buffer overflow vulnerability exploitable via a crafted .xps file, which can lead to arbitrary code execution or a denial of service. The issue is associated with STDUXPSFile!DllUnregisterServer+0x0000000000025706 (Illegal Instruction Violation starting ...

CVE-2017-14689

STDU Viewer 1.6.375 is affected by a vulnerability exploitable via a specially crafted .djvu file, which can cause a denial of service and potentially other impact. The issue is tied to the code path in STDUDjVuFile!DllUnregisterServer where Data from a faulting address is used as arguments in a ...

CVE-2017-14691

STDU Viewer 1.6.375 is affected by a vulnerability exploitable via a specially crafted .jb2 file, which can cause a denial of service and potentially other impact. The issue is described as related to Data from Faulting Address controlling Branch Selection starting at ntdll_773a0000!RtlAddAccessA...

CVE-2017-14296

CVE-2017-14296 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a specially crafted .jb2 file, leading to arbitrary code execution or a denial of service via data from a faulting address in STDUJBIG2File!DllGetClassObject. The connected CNVD/NVD entries describe the same issue w...

CVE-2017-14300

CVE-2017-14300 affects STDU Viewer 1.6.375. A vulnerability described in CNVD-2017-30264 and related records is a buffer/logic flaw in processing a specially crafted .jb2 file, where “Data from Faulting Address controls subsequent Write Address” in STDUJBIG2File!DllGetClassObject+0x4479 enables a...

CVE-2017-14303

STDU Viewer 1.6.375 is affected by a vulnerability that can be triggered by a specially crafted .jb2 file. According to multiple sources, this may cause a denial of service and potentially other unspecified impact due to a Read Access Violation in STDUJBIG2File!DllGetClassObject (starting at that...

CVE-2017-14543

CVE-2017-14543 affects STDU Viewer 1.6.375. A crafted .epub can cause a denial of service or possibly other unspecified impact due to Data from Faulting Address controlling Branch Selection at STDUEPubFile!DllUnregisterServer+0x0000000000039335. The connected sources confirm the product/version a...

CVE-2017-14554

CVE-2017-14554 affects STDU Viewer 1.6.375. A crafted .djvu file can trigger a denial of service and possibly other impact via a possible stack corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d908. Local attacker access and low attack complexity are indicated; exploitation d...

CVE-2017-14555

Summary (CVE-2017-14555) STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability caused by a buffer overflow when processing crafted .djvu files. The issue is tied to data from a faulting address being used as arguments in a subsequent function call beginning at STDUDjVuF...

CVE-2017-14572

STDU Viewer 1.6.375 is affected by a vulnerability in processing .xps files that can lead to arbitrary code execution or denial of service when a crafted XPS file is opened. The issue is described as a buffer/unsafe write condition (e.g., related to a User Mode Write AV at specific symbols) that ...

CVE-2017-8387

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability leading to code execution via crafted files. Exploitation appears to require user interaction (e.g., handling a crafted file and navigating commands such as Ctrl-+); CVE notes user-assisted execution. CNVD-2017-14002 confirms a bu...

CVE-2017-14570

STDU Viewer 1.6.375 is affected by a buffer overflow triggered by a crafted .xps file, enabling arbitrary code execution or denial of service. The issue is related to a User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1. Connected sources from CNVD-2017-30283 an...