XnView Classic 2.40 for Windows vulnerabilities
4 known CVE vulnerabilities in XnView Classic 2.40 for Windows, translated and rated.
- CVE-2017-14278High
XnView Classic version 2.40 for Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a 'Read Access Violation'.
- CVE-2017-9903High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue relates to code flow control from a faulting address.
- CVE-2017-9893High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue is related to a User Mode Write AV concerning the gffGetFormatInfo function.
- CVE-2017-10742High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Data Execution Prevention Violation.