CVE-2017-10757
HighSummary
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to branch selection control associated with a faulting address.
Risk Assessment
The organization may be exposed to attacks that lead to denial of service, potentially disrupting application availability and impacting business operations.
Recommendation
It is recommended to update XnView Classic to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in XnView Classic for Windows Version 2.40
See all- CVE-2017-14273High
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
- CVE-2017-10783High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10781High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10780High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10778High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10777High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10776High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10775High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10774High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10773High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to Branch Selection controls from Faulting Address.
Original NVD description (English source)
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."