XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385."Referenceshttps://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9900
