XnView Classic 2.40 vulnerabilities

85 known CVE vulnerabilities in XnView Classic 2.40, translated and rated.

CVE-2017-9901High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue relates to how data from the faulting address controls subsequent write address.
CVE-2017-9900High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue relates to code flow control from a faulting address.
CVE-2017-9899High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue relates to code flow control from a faulting address.
CVE-2017-9898High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue is related to a User Mode Write AV at address Xfpx+0x0000000000004cbb.
CVE-2017-9897High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file, related to a 'User Mode Write AV'.
CVE-2017-9896High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file, related to a Read Access Violation on Control Flow.
CVE-2017-9895High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file, related to a Read Access Violation on Control Flow.
CVE-2017-9894High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file. The issue is related to a User Mode Write AV concerning the gffGetFormatInfo function.
CVE-2017-9529High
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .fpx file, related to a 'User Mode Write AV'.
CVE-2017-8781High
XnView Classic version 2.40 for Windows allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in 'Browser' mode, due to a 'Stack Buffer Overrun' issue.
CVE-2017-8381High
XnView Classic version 2.40 for Windows allows user-assisted remote attackers to execute code via a crafted .mkv file mishandled during the opening of a directory in 'Browser' mode, due to a 'User Mode Write AV near NULL' in XnView.exe.
CVE-2017-8282High
XnView Classic version 2.40 for Windows allows user-assisted remote attackers to execute code via a crafted .mov file mishandled during the opening of a directory in 'Browser' mode, due to a 'User Mode Write AV near NULL' in XnView.exe.
CVE-2017-10782High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10779High
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10766High
XnView Classic version 2.40 for Windows may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10765High
XnView Classic for Windows version 2.40 may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10764High
XnView Classic for Windows version 2.40 may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10761High
XnView Classic for Windows version 2.40 may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10759High
XnView Classic version 2.40 for Windows may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10755High
XnView Classic version 2.40 for Windows may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10751High
XnView Classic version 2.40 for Windows may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file.
CVE-2017-10750High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to 'User Mode Write AV near NULL'.
CVE-2017-10749High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file.
CVE-2017-10748High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a 'User Mode Write AV' error at xnview+0x000000000022bf8d.
CVE-2017-10747High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a User Mode Write AV starting at xnview+0x000000000037a8aa.
CVE-2017-10746High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to 'User Mode Write AV'.
CVE-2017-10745High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a stack buffer overrun.
CVE-2017-10744High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Read Access Violation on Control Flow.
CVE-2017-10743High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a stack buffer overrun.
CVE-2017-10741High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to 'User Mode Write AV'.
CVE-2017-10740High
XnView Classic for Windows version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to user mode node insertion.
CVE-2017-10739High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Data Execution Prevention Violation.
CVE-2017-10738High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Data Execution Prevention Violation.
CVE-2017-10737High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a user mode write error in the RtlpCoalesceFreeBlocks function.
CVE-2017-10736High
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a User Mode Write AV concerning the msvcrt!_VEC_memzero function.