XnView Classic 2.40 vulnerabilities

86 known CVE vulnerabilities in XnView Classic 2.40, translated and rated.

CVE-2017-15789High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a User Mode Write AV concerning CADImage.
CVE-2017-15788High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a User Mode Write AV concerning CADImage.
CVE-2017-15787High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a Data Execution Prevention Violation.
CVE-2017-15786High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a 'Read Access Violation'.
CVE-2017-15785High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a Data Execution Prevention Violation near NULL.
CVE-2017-15784High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an 'Illegal Instruction Violation'.
CVE-2017-15783High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.
CVE-2017-15782High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a User Mode Write AV concerning CADImage.
CVE-2017-15781High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a Read Access Violation on Control Flow.
CVE-2017-15780High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a 'Read Access Violation starting at CADImage+0x0000000000285dad.'
CVE-2017-15779High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue relates to how data from the faulting address controls the subsequent write address.
CVE-2017-15778High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a 'Read Access Violation'.
CVE-2017-15777High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue is related to a User Mode Write AV near NULL.
CVE-2017-15776High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.
CVE-2017-15775High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.
CVE-2017-15774High
XnView Classic version 2.43 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue relates to code flow control from a faulting address.
CVE-2017-15773High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a 'Read Access Violation'.
CVE-2017-15772High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.
CVE-2017-15803High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon.
CVE-2017-15802High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon.
CVE-2017-15801High
XnView Classic version 2.43 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon.
CVE-2017-14580High
XnView Classic version 2.41 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a user mode write AV at jbig2dec.
CVE-2017-14541High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
CVE-2017-14538High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue relates to how data from the faulting address controls the subsequent write address.
CVE-2017-14285High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
CVE-2017-14284High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
CVE-2017-14283High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
CVE-2017-14282High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
CVE-2017-14281High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
CVE-2017-14280High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file.
CVE-2017-14279High
XnView Classic for Windows version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation starting at jbig2dec+0x0000000000005643.'
CVE-2017-14277High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
CVE-2017-14276High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to possible stack corruption.
CVE-2017-14275High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
CVE-2017-14274High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file. The issue relates to how data from the faulting address controls the subsequent write address.
CVE-2017-14272High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a user mode write AV at jbig2dec.
CVE-2017-14271High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
CVE-2017-14270High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file.
CVE-2017-9914High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .bie file, related to a 'Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b.'
CVE-2017-9913High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9912High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9911High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9910High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9909High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9908High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a 'Read Access Violation starting at Xfpx+0x000000000000d6da.'
CVE-2017-9907High
XnView Classic for Windows version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to possible stack corruption.
CVE-2017-9906High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9905High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9904High
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
CVE-2017-9902High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue is related to code flow control from a faulting address.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS