deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-10743
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpInitializeNode+0x[PII_REDACTED]00015b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10743; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10743
CVE: CVE-2017-10744
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x[PII_REDACTED]000032."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10744; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10744
CVE: CVE-2017-10745
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!RtlProcessFlsData+0x[PII_REDACTED]0000b0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10745; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10745
CVE: CVE-2017-10746
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x[PII_REDACTED]000012."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10746; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10746
CVE: CVE-2017-10747
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x[PII_REDACTED]37a8aa."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10747; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10747
CVE: CVE-2017-10748
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x[PII_REDACTED]22bf8d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10748; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10748
CVE: CVE-2017-10749
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10749; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10749
CVE: CVE-2017-10750
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriticalSection+0x[PII_REDACTED]000012."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10750; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10750
CVE: CVE-2017-10751
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x[PII_REDACTED]000133."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10751; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10751
CVE: CVE-2017-10752
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x[PII_REDACTED]00001f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10752; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10752
CVE: CVE-2017-10753
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByMapping+0x[PII_REDACTED]000046."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10753; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10753
CVE: CVE-2017-10754
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x[PII_REDACTED]000031."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10754; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10754
CVE: CVE-2017-10755
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x[PII_REDACTED]00010b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10755; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10755
CVE: CVE-2017-10756
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x[PII_REDACTED]000046."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10756; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10756
CVE: CVE-2017-10757
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x[PII_REDACTED]0001b6."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10757; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10757
CVE: CVE-2017-10758
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x[PII_REDACTED]0004b4."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10758; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10758
CVE: CVE-2017-10759
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInsertDependencyRecord+0x[PII_REDACTED]000039."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10759; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10759
CVE: CVE-2017-10760
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x[PII_REDACTED]000029."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10760; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10760
CVE: CVE-2017-10761
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x[PII_REDACTED]000429."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10761; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10761
CVE: CVE-2017-10762
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x[PII_REDACTED]00042f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10762; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10762
CVE: CVE-2017-10763
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByHandle+0x[PII_REDACTED]000031."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10763; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10763
CVE: CVE-2017-10764
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!Tab_OnGetItem+0x[PII_REDACTED]00002f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10764; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10764
CVE: CVE-2017-10765
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at IMM32!ImmLockImeDpi+0x[PII_REDACTED]000050."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10765; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10765
CVE: CVE-2017-10766
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x[PII_REDACTED]0001c8."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10766; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10766
CVE: CVE-2017-10767
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x[PII_REDACTED]000005."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10767
CVE: CVE-2017-10768
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpInsertFreeBlock+0x[PII_REDACTED]0001ca."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10768; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10768
CVE: CVE-2017-10769
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x[PII_REDACTED]000018" (without RPC initialization).
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10769; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10769
CVE: CVE-2017-10770
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x[PII_REDACTED]00053a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10770; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10770
CVE: CVE-2017-10771
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCreateSplitBlock+0x[PII_REDACTED]000510."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10771; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10771
CVE: CVE-2017-10772
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x[PII_REDACTED]000018" (with RPC initialization).
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10772; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10772
CVE: CVE-2017-10773
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at MSCTF!_CtfImeCreateThreadMgr+0x[PII_REDACTED]0000a8."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10773; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10773
CVE: CVE-2017-10774
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!FindSortHashNode+0x[PII_REDACTED]000040."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10774; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10774
CVE: CVE-2017-10775
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at GDI32!ScriptGetCMapWithSurrogate+0x[PII_REDACTED]0001cb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10775; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10775
CVE: CVE-2017-10776
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to a "Read Access Violation starting at ntdll_77df0000!LdrShutdownProcess+0x[PII_REDACTED]000130."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10776; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10776
CVE: CVE-2017-10777
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x[PII_REDACTED]372b24."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10777; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10777
CVE: CVE-2017-10778
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x[PII_REDACTED]233125."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10778; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10778
CVE: CVE-2017-10779
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x[PII_REDACTED]013a20."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10779; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10779
CVE: CVE-2017-10780
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x[PII_REDACTED]372b4a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10780; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10780
CVE: CVE-2017-10781
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x[PII_REDACTED]0000a5."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10781; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10781
CVE: CVE-2017-10782
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x[PII_REDACTED]0003ca."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10782; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10782
CVE: CVE-2017-10783
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x[PII_REDACTED]000393."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10783; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10783
CVE: CVE-2017-10924
Published: 2017-07-05
Description: IrfanView 4.44 (32bit) with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00a529."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10924; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-10925
Published: 2017-07-05
Description: IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00b3ae."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10925; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-10926
Published: 2017-07-05
Description: IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10926; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-7894
Published: 2017-07-05
Description: WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, because of a "User Mode Write AV near NULL" in WinDjView.exe. One threat model is a victim who obtains an untrusted .djvu file from a remote location and issues several user-defined commands.
CVSS Score: 7.8 (HIGH)
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7894; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-7894
CVE: CVE-2017-8282
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8282; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8282