Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
138 results · page 1 of 3
Oct 7, 2026A flaw has been found in XnView Classic 2.52.5.CVE-2026-107125 · Other software · XnView · reported by VulDBLow 2.1
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.
- Product
- Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnewsgroup.xnview.comvuldb.com
Dec 11, 2024XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability.CVE-2024-11950 · Other software · XnSoft · reported by zdi-disclosures@trendmicro.comHigh 8.8
XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RWZ files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22913.
- Product
- XnView Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2023XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.CVE-2023-52174 · Other software · Xnview · reported by MITRECritical 9.8
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comnewsgroup.xnview.com
Dec 28, 2023XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.CVE-2023-52173 · Other software · Xnview · reported by MITRECritical 9.8
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comnewsgroup.xnview.com
Oct 27, 2023Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.CVE-2023-46587 · Other software · Xnview · reported by MITREHigh 7.8
Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2019XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.CVE-2019-17262 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2019XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.CVE-2019-17261 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.CVE-2019-13262 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.CVE-2019-13261 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.CVE-2019-13260 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.CVE-2019-13259 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.CVE-2019-13258 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.CVE-2019-13257 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.CVE-2019-13256 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.CVE-2019-13255 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.CVE-2019-13254 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.CVE-2019-13253 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 30, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.CVE-2019-13085 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 30, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.CVE-2019-13084 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 30, 2019XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.CVE-2019-13083 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 23, 2019XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CVE-2019-9969 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x385399.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode610.blogspot.comcode610.blogspot.com
Mar 23, 2019XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CVE-2019-9968 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode610.blogspot.comcode610.blogspot.com
Mar 23, 2019XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CVE-2019-9967 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode610.blogspot.comcode610.blogspot.com
Mar 23, 2019XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CVE-2019-9966 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c.
- Product
- Xnview Classic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode610.blogspot.comcode610.blogspot.com
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User ModeCVE-2017-15789 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User ModeCVE-2017-15788 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x0000000000002d83."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data ExecCVE-2017-15787 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at xnview+0x0000000000580063."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15786 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data ExecCVE-2017-15785 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal CVE-2017-15784 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal Instruction Violation starting at xnview+0x0000000000370074."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15783 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User ModeCVE-2017-15782 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000032eb."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read AcceCVE-2017-15781 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15780 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from FCVE-2017-15779 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15778 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User ModeCVE-2017-15777 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15776 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15775 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from FCVE-2017-15774 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15773 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relatedCVE-2017-15772 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is CVE-2017-15803 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is CVE-2017-15802 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 22, 2017XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is CVE-2017-15801 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2017XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User ModeCVE-2017-14580 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000870f."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2017XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, relatedCVE-2017-14541 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2017XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from FCVE-2017-14538 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008823."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2017XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relatedCVE-2017-14285 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlInterlockedPopEntrySList+0x000000000000039b."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2017XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relatedCVE-2017-14284 · Other software · Xnview · reported by MITREHigh 7.8
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!RtlGetCurrentDirectory_U+0x000000000000016c."
- Product
- Xnview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.