deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15797
Published: 2017-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15798
Published: 2017-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15799
Published: 2017-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15800
Published: 2017-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15801
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResSearchResourceInsideDirectory+0x[PII_REDACTED]00029e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15801; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15801
CVE: CVE-2017-15802
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x[PII_REDACTED]000087."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15802; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15802
CVE: CVE-2017-15803
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x[PII_REDACTED]000150."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15803; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15803
CVE: CVE-2017-15227
Published: 2017-10-22
Description: Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://openwall.com/lists/oss-security/2017/10/22/4; https://irssi.org/security/irssi_sa_2017_10.txt; https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html
CVE: CVE-2017-15228
Published: 2017-10-22
Description: Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://openwall.com/lists/oss-security/2017/10/22/4; https://irssi.org/security/irssi_sa_2017_10.txt; https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html
CVE: CVE-2017-15721
Published: 2017-10-22
Description: In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://openwall.com/lists/oss-security/2017/10/22/4; https://irssi.org/security/irssi_sa_2017_10.txt; https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html
CVE: CVE-2017-15722
Published: 2017-10-22
Description: In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: http://openwall.com/lists/oss-security/2017/10/22/4; https://irssi.org/security/irssi_sa_2017_10.txt; https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html
CVE: CVE-2017-15723
Published: 2017-10-22
Description: In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://openwall.com/lists/oss-security/2017/10/22/4; https://irssi.org/security/irssi_sa_2017_10.txt; https://www.debian.org/security/2017/dsa-4016
CVE: CVE-2017-15737
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x[PII_REDACTED]3d246f."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15737; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15737
CVE: CVE-2017-15738
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x[PII_REDACTED]3d22d8."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15738; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15738
CVE: CVE-2017-15739
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADIMAGE+0x[PII_REDACTED]0042d5."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15739; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15739
CVE: CVE-2017-15740
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADIMAGE+0x[PII_REDACTED]33228e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15740; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15740
CVE: CVE-2017-15741
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x[PII_REDACTED]3d2378."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741
CVE: CVE-2017-15742
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x[PII_REDACTED]3d2328."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15742; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15742
CVE: CVE-2017-15743
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x[PII_REDACTED]3d24a0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15743; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15743
CVE: CVE-2017-15744
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADIMAGE+0x[PII_REDACTED]3d35a7."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15744; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15744
CVE: CVE-2017-15745
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x[PII_REDACTED]02ca2e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15745; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15745
CVE: CVE-2017-15746
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x[PII_REDACTED]3d21b3."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15746; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15746
CVE: CVE-2017-15747
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x[PII_REDACTED]3d35ad."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15747; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15747
CVE: CVE-2017-15748
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x[PII_REDACTED]00613a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15748; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15748
CVE: CVE-2017-15749
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x[PII_REDACTED]0348b9."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15749; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15749
CVE: CVE-2017-15750
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]009ae0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15750; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15750
CVE: CVE-2017-15751
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]009f39."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15751; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15751
CVE: CVE-2017-15752
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]04d6b0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15752; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15752
CVE: CVE-2017-15753
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]0029c2."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15753; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15753
CVE: CVE-2017-15754
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]013968."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15754; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15754
CVE: CVE-2017-15755
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x[PII_REDACTED]000091."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15755; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15755
CVE: CVE-2017-15756
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]04d7c4."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15756; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15756
CVE: CVE-2017-15757
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]0029ba."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15757; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15757
CVE: CVE-2017-15758
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]04d75b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15758; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15758
CVE: CVE-2017-15759
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01b3f3."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15759; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15759
CVE: CVE-2017-15760
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01ce82."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15760; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15760
CVE: CVE-2017-15761
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01ecaa."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15761; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15761
CVE: CVE-2017-15762
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01f31b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15762; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15762
CVE: CVE-2017-15763
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01eca0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15763; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15763
CVE: CVE-2017-15764
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01e6b0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15764; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15764
CVE: CVE-2017-15765
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x[PII_REDACTED]3e9462."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765
CVE: CVE-2017-15766
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x[PII_REDACTED]01f0a0."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15766; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15766
CVE: CVE-2017-15767
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x[PII_REDACTED]3d5b52."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15767; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15767
CVE: CVE-2017-15768
Published: 2017-10-22
Description: IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x[PII_REDACTED]094113."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15768; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15768
CVE: CVE-2017-15769
Published: 2017-10-22
Description: IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP_W+0x[PII_REDACTED]001b22."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15769; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15769
CVE: CVE-2017-15770
Published: 2017-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15771
Published: 2017-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-15772
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x[PII_REDACTED]285e9d."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15772; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15772
CVE: CVE-2017-15773
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x[PII_REDACTED]285d79."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15773; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15773
CVE: CVE-2017-15774
Published: 2017-10-22
Description: XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x[PII_REDACTED]221a9a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15774; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15774