CVE-2017-10780
HighSummary
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
Risk Assessment
The organization may be exposed to service outages and unforeseen consequences related to the exploitation of this vulnerability.
Recommendation
It is recommended to update XnView Classic to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in XnView Classic for Windows Version 2.40
See all- CVE-2017-14273High
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
- CVE-2017-10783High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10781High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10778High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10777High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10776High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10775High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a 'Read Access Violation'.
- CVE-2017-10774High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
- CVE-2017-10773High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to Branch Selection controls from Faulting Address.
- CVE-2017-10772High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control.
Original NVD description (English source)
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a."