CVE-2017-10775
HighSummary
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
Risk Assessment
The organization may be exposed to attacks that lead to application downtime or other unforeseen security issues.
Recommendation
It is recommended to update XnView Classic to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in XnView Classic for Windows Version 2.40
See all- CVE-2017-14273High
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
- CVE-2017-10783High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10781High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10780High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10778High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10777High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10776High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10774High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10773High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to Branch Selection controls from Faulting Address.
- CVE-2017-10772High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control.
Original NVD description (English source)
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x00000000000001cb."