deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8368
Published: 2017-07-05
Description: Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as demonstrated by Ctrl-A, Delete, and Ctrl-Z.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/SublimeTextIssues/Core/issues/1700; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8368; https://github.com/SublimeTextIssues/Core/issues/1700
CVE: CVE-2017-8369
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) has a "Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x[PII_REDACTED]0002f3" issue, which might allow attackers to execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8369; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-8370
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service (Heap Corruption and application crash) in processing a FlashPix (.FPX) file, a different vulnerability than CVE-2017-7721.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8370; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-8381
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled during the opening of a directory in "Browser" mode, because of a "User Mode Write AV near NULL" in XnView.exe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8381; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8381
CVE: CVE-2017-8387
Published: 2017-07-05
Description: STDU Viewer version 1.6.375 might allow user-assisted attackers to execute code via a crafted file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands including Ctrl-+ commands.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8387; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8387
CVE: CVE-2017-8420
Published: 2017-07-05
Description: SWFTools 2013-04-09-1007 on Windows has a "Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x[PII_REDACTED]003e71" issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS (Access Violation).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8420; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8420
CVE: CVE-2017-8766
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) allows remote attackers to execute code via a crafted .mov file, because of a "User Mode Write AV near NULL" issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8766; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8766
CVE: CVE-2017-8781
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is mishandled during the opening of a directory in "Browser" mode, because of a "Stack Buffer Overrun" issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8781; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8781
CVE: CVE-2017-8785
Published: 2017-07-05
Description: FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8785; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8785
CVE: CVE-2017-8803
Published: 2017-07-05
Description: Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8803; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8803
CVE: CVE-2017-8826
Published: 2017-07-05
Description: FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8826; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8826
CVE: CVE-2017-9528
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]000f53."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9528; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9529
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x[PII_REDACTED]004efd."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9529; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9529
CVE: CVE-2017-9530
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!LdrpResCompareResourceNames+0x[PII_REDACTED]000150."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9530; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-9531
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x[PII_REDACTED]00176c."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9531; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9532
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x[PII_REDACTED]001555."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9532; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9533
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DE_Decode+0x[PII_REDACTED]000a9b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9533; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9534
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x[PII_REDACTED]017426."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9534; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9535
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x[PII_REDACTED]016e53."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9535; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9536
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]0014eb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9536; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9873
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x[PII_REDACTED]012bf2."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9873; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9874
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]007822."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9874; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9875
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DE_Decode+0x[PII_REDACTED]000cdb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9875; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9876
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00c995."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9876; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9877
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00c998."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9877; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9878
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00c99a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9878; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9879
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00a525."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9879; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9880
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x[PII_REDACTED]007236."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9880; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9881
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]0014e7."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9881; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9882
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Block Data Move starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]00b84f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9882; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9883
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x[PII_REDACTED]007216."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9883; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9884
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x[PII_REDACTED]0001b6."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9884; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9885
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]006a98."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9885; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9886
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x[PII_REDACTED]00001f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9886; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9887
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX+0x[PII_REDACTED]00688d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9887; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9888
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]0031a0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9888; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9889
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]003714."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9889; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9890
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x[PII_REDACTED]00153a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9890; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9891
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x[PII_REDACTED]007053."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9891; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9892
Published: 2017-07-05
Description: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x[PII_REDACTED]000393."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.com/plugins.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9892; http://www.irfanview.com/plugins.htm
CVE: CVE-2017-9893
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x[PII_REDACTED]012548."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9893; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9893
CVE: CVE-2017-9894
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x[PII_REDACTED]029272."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9894; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9894
CVE: CVE-2017-9895
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x[PII_REDACTED]020e95."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9895; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9895
CVE: CVE-2017-9896
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at Xfpx!gffGetFormatInfo+0x[PII_REDACTED]013e8a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9896; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9896
CVE: CVE-2017-9897
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x[PII_REDACTED]00dcab."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9897; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9897
CVE: CVE-2017-9898
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x[PII_REDACTED]004cbb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9898; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9898
CVE: CVE-2017-9899
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x[PII_REDACTED]02e388."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9899; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9899
CVE: CVE-2017-9900
Published: 2017-07-05
Description: XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x[PII_REDACTED]02e385."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9900; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9900