CVE-2017-10773
HighSummary
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to Branch Selection controls from Faulting Address.
Risk Assessment
The organization may be vulnerable to attacks that lead to denial of service, potentially disrupting application availability and impacting business operations.
Recommendation
It is recommended to update XnView Classic to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in XnView Classic for Windows Version 2.40
See all- CVE-2017-14273High
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
- CVE-2017-10783High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10781High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10780High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10778High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10777High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10776High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10775High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10774High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10772High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control.
Original NVD description (English source)
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at MSCTF!_CtfImeCreateThreadMgr+0x00000000000000a8."