CVE-2017-14574

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability triggered by a crafted .xps file. A local attacker could potentially execute arbitrary code or cause a denial of service. The CNVD-2017-30279 entry corroborates a buffer overflow and local exploit path, with impact described as co...

CVE-2017-14690

STDU Viewer 1.6.375 is affected by a vulnerability in the JBIG2 handling that allows arbitrary code execution or a denial of service via a crafted .jb2 file. The issue is linked to Data from Faulting Address controlling the subsequent Write Address in STDUJBIG2File!DllGetClassObject+0x64e7, indic...

CVE-2017-14295

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability triggered by a specially crafted .jb2 file. The issue allows an attacker to execute arbitrary code or cause a denial of service, with the root cause described as Data from Faulting Address controls Code Flow starting at STDUJBIG2F...

CVE-2017-14309

STDU Viewer 1.6.375 is affected by CVE-2017-14309. A crafted .jb2 file can trigger a denial of service and potentially other impact due to a Read Access Violation in STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8. The vulnerability is triggered by processing the JBIG2 data, with exploitatio...

CVE-2017-14543

CVE-2017-14543 affects STDU Viewer 1.6.375. A crafted .epub can cause a denial of service or possibly other unspecified impact due to Data from Faulting Address controlling Branch Selection at STDUEPubFile!DllUnregisterServer+0x0000000000039335. The connected sources confirm the product/version a...

CVE-2017-14547

STDU Viewer 1.6.375 has a local, crafted .mobi file-triggered buffer overflow (Read Access Violation at STDUMOBIFile!DllUnregisterServer+0x…c0). The vulnerability enables a local attacker to cause a denial of service and potentially other unspecified impact. Connected CNVD-2017-30324 confirms a b...

CVE-2017-14575

STDU Viewer 1.6.375 is affected by a buffer overflow when processing crafted .xps files, leading to arbitrary code execution or denial of service. The issue is linked to an Illegal Instruction Violation originating from STDUXPSFile!DllUnregisterServer+0x000000000002566c. Multiple sources (NVD/CNV...

CVE-2017-14296

CVE-2017-14296 affects STDU Viewer 1.6.375. A buffer overflow can be triggered by a specially crafted .jb2 file, leading to arbitrary code execution or a denial of service via data from a faulting address in STDUJBIG2File!DllGetClassObject. The connected CNVD/NVD entries describe the same issue w...

CVE-2017-14300

CVE-2017-14300 affects STDU Viewer 1.6.375. A vulnerability described in CNVD-2017-30264 and related records is a buffer/logic flaw in processing a specially crafted .jb2 file, where “Data from Faulting Address controls subsequent Write Address” in STDUJBIG2File!DllGetClassObject+0x4479 enables a...

CVE-2017-14303

STDU Viewer 1.6.375 is affected by a vulnerability that can be triggered by a specially crafted .jb2 file. According to multiple sources, this may cause a denial of service and potentially other unspecified impact due to a Read Access Violation in STDUJBIG2File!DllGetClassObject (starting at that...

CVE-2017-14560

STDU Viewer 1.6.375 is vulnerable to a buffer overflow via a specially crafted .xps file (reported in CVE-2017-14560). The issue relates to Data from Faulting Address controlling Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x5bd2, potentially allowing a local attacker to cause a ...

CVE-2017-14572

STDU Viewer 1.6.375 is affected by a vulnerability in processing .xps files that can lead to arbitrary code execution or denial of service when a crafted XPS file is opened. The issue is described as a buffer/unsafe write condition (e.g., related to a User Mode Write AV at specific symbols) that ...

CVE-2017-14689

STDU Viewer 1.6.375 is affected by a vulnerability exploitable via a specially crafted .djvu file, which can cause a denial of service and potentially other impact. The issue is tied to the code path in STDUDjVuFile!DllUnregisterServer where Data from a faulting address is used as arguments in a ...

CVE-2017-14571

STDU Viewer 1.6.375 is affected by a local-buffer overflow vulnerability exploitable via a crafted .xps file, which can lead to arbitrary code execution or a denial of service. The issue is associated with STDUXPSFile!DllUnregisterServer+0x0000000000025706 (Illegal Instruction Violation starting ...

CVE-2017-14691

STDU Viewer 1.6.375 is affected by a vulnerability exploitable via a specially crafted .jb2 file, which can cause a denial of service and potentially other impact. The issue is described as related to Data from Faulting Address controlling Branch Selection starting at ntdll_773a0000!RtlAddAccessA...

CVE-2017-8387

STDU Viewer 1.6.375 is affected by a buffer overflow vulnerability leading to code execution via crafted files. Exploitation appears to require user interaction (e.g., handling a crafted file and navigating commands such as Ctrl-+); CVE notes user-assisted execution. CNVD-2017-14002 confirms a bu...

CVE-2017-14555

Summary (CVE-2017-14555) STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability caused by a buffer overflow when processing crafted .djvu files. The issue is tied to data from a faulting address being used as arguments in a subsequent function call beginning at STDUDjVuF...

CVE-2017-14570

STDU Viewer 1.6.375 is affected by a buffer overflow triggered by a crafted .xps file, enabling arbitrary code execution or denial of service. The issue is related to a User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1. Connected sources from CNVD-2017-30283 an...