Lucene search

K
cveFlexeraCVE-2012-0277
HistoryJul 17, 2012 - 9:55 p.m.

CVE-2012-0277

2012-07-1721:55:01
CWE-119
flexera
web.nvd.nist.gov
26
4
cve-2012-0277
xnview
buffer overflow
denial of service
arbitrary code execution
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.084

Percentile

94.4%

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image.

Affected configurations

Nvd
Node
xnviewxnviewRange1.98.8
VendorProductVersionCPE
xnviewxnview*cpe:2.3:a:xnview:xnview:*:*:*:*:*:*:*:*

Social References

More

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.084

Percentile

94.4%