rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-15715 
In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.
Problem types: description: <FilesMatch> bypass with a trailing newline in the file name
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2018-03-26T15:00:00.000Z
CVE-2017-15717 
A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 and Apache Sling XSS Protection API 2.0.0.
Problem types: description: Insufficient XSS protection
Affected products: vendor: Apache Software Foundation
product: Apache Sling
Published: 2018-01-10T14:00:00.000Z
CVE-2017-15718 
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Hadoop
Published: 2018-01-24T14:00:00.000Z
CVE-2017-15719 
In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.
Problem types: description: XSS
Affected products: vendor: Apache Software Foundation
product: Wicket jQuery UI
Published: 2018-03-12T13:00:00.000Z
CVE-2017-15720 
In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
Problem types: description: Remote code execution (RCE)
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2019-01-23T17:00:00.000Z
CVE-2017-15721 
In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15722 
In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15723 
In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15725 
An XML External Entity Injection vulnerability exists in Dzone AnswerHub.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-28T18:33:28.000Z
CVE-2017-15727 
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15728 
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15729 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15730 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15731 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15732 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15733 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15734 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15735 
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15736 
Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-21T22:00:00.000Z
CVE-2017-15737 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d246f."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15738 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15739 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADIMAGE+0x00000000000042d5."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15740 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADIMAGE+0x000000000033228e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15741 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15742 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15743 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15744 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15745 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15746 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15747 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15748 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15749 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15750 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15751 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009f39."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15752 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d6b0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15753 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029c2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15754 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000013968."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15755 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15756 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d7c4."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15757 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029ba."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15758 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d75b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15759 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15760 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ce82."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15761 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ecaa."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15762 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15763 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001eca0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15764 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15765 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15766 
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f0a0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15767 
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15768 
IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15769 
IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15772 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15773 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15774 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15775 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15776 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15777 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15778 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15779 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15780 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15781 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15782 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000032eb."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15783 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15784 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal Instruction Violation starting at xnview+0x0000000000370074."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15785 
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z
CVE-2017-15786 
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-22T17:00:00.000Z