1380 matches found
XnView JXR File Handling Buffer Overflow Vulnerability
XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...
CVE-2013-3938
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
Integer overflow
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
CVE-2013-3938
XnView 2.13 is affected by a heap-based buffer overflow in the JXR file handling path. The vulnerability stems from an integer/NUM_ELEMENTS issue in an IFD_ENTRY structure processed by xnview.exe, which can lead to remote code execution. Affected product/version: XnView 2.13; vulnerable component...
CVE-2013-3938
Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...
KLA10404 ACE vulnerability in XnView
An integer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JXR file. Original advisories - Related products XnView CVE list CVE-2013-3938 critical Solution Update to...
XnView JXR IFD_ENTRY处理整数溢出漏洞
XnView是一款浏览的图片查看器,支持多种图形格式。 由于当执行JXR文件中的IFDENTRY时xnview.exe存在证书溢出错误,可引起基于堆的缓冲区溢出。 0 XnView 2.13 目前厂商暂无提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.xnview.com/...
XnView 1.92.1 - Command-Line Arguments Buffer Overflow
// source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may exploit this issue only if XnView is configured as a...
XnView 1.92.1 - Command-Line Arguments Buffer Overflow
XnView 1.92.1 - Command-Line Arguments Buffer Overflow // source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...
XnView 1.92.1 Command-Line Arguments Buffer Overflow Vulnerability
Exploit for windows platform in category remote exploits source: http://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...
XnView 2.x < 2.13 Multiple Buffer Overflows
The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...
XnView PCT File Processing Buffer Overflow (CVE-2013-2577)
A buffer overflow vulnerability exists in XnView. The vulnerability is due to a boundary error in processing image data in certain PCT files. An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted file. A successful attack can lead to arbitrary code execution ...
XnView PCT File Handling Buffer Overflow Vulnerability
XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...
CVE-2013-2577
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...
Buffer overflow
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...
CVE-2013-2577
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...
CVE-2013-2577
CVE-2013-2577 is a buffer overflow in XnView’s PCT file handling affecting 2.03 and earlier. A crafted PCT file can cause remote code execution, as demonstrated by Core Security/CoreLabs advisories and public proofs of concept. Public exploits exist (e.g., Exploit-DB CORE-2013-0705/27049), with v...
KLA10403 ACE vulnerability in XnView
A buffer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PCT file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...
XnView 2.x < 2.04 Multiple Buffer Overflow Vulnerabilities
The version of XnView installed on the remote Windows host is 2.x, earlier than 2.04. It is, therefore, reportedly affected by the following overflow vulnerabilities: - An unspecified error exists that could allow a buffer overflow during 'PCT' file handling. CVE-2013-2577 - Unspecified errors...