Xnview

CVEs (165)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-9907	Xnview Xnview	Hig	0.51	7.8	0.01	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."
CVE-2017-9906	Xnview Xnview	Hig	0.51	7.8	0.01	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at…
CVE-2017-9905	Xnview Xnview	Hig	0.51	7.8	0.01	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at Xfpx!gffGetFormatInfo+0x00000000000228e8."
CVE-2017-9904	Xnview Xnview	Hig	0.51	7.8	0.01	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000…
CVE-2017-9903	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."
CVE-2017-9902	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."
CVE-2017-9901	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5."
CVE-2017-9900	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."
CVE-2017-9899	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388."
CVE-2017-9898	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."
CVE-2017-9897	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab."
CVE-2017-9896	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."
CVE-2017-9895	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e95."
CVE-2017-9894	Xnview Xnview	Hig	0.51	7.8	0.01	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."
CVE-2017-9893	Xnview Xnview	Hig	0.51	7.8	0.01	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548."
CVE-2017-9529	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."
CVE-2017-8781	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue.
CVE-2017-8381	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.
CVE-2017-8282	Xnview Xnview	Hig	0.51	7.8	0.02	Jul 5, 2017	XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.
CVE-2017-10783	Xnview Xnview	Hig	0.51	7.8	0.00	Jul 5, 2017	XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x000000000000039…

CVE-2017-9907HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.01
XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."
CVE-2017-9906HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.01
XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at…
CVE-2017-9905HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.01
XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at Xfpx!gffGetFormatInfo+0x00000000000228e8."
CVE-2017-9904HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.01
XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000…
CVE-2017-9903HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."
CVE-2017-9902HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e91."
CVE-2017-9901HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5."
CVE-2017-9900HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."
CVE-2017-9899HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388."
CVE-2017-9898HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."
CVE-2017-9897HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab."
CVE-2017-9896HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000013e8a."
CVE-2017-9895HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x0000000000020e95."
CVE-2017-9894HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.01
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."
CVE-2017-9893HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.01
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000012548."
CVE-2017-9529HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."
CVE-2017-8781HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue.
CVE-2017-8381HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.
CVE-2017-8282HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.02
XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.
CVE-2017-10783HigJul 5, 2017
Xnview
Xnview
risk 0.51cvss 7.8epss 0.00
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x000000000000039…

Page 5 of 9