Lucene search
+L

1380 matches found

OpenVAS
OpenVAS
added 2014/03/26 12:0 a.m.31 views

XnView JXR File Handling Buffer Overflow Vulnerability

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...

9.3CVSS7.2AI score0.03498EPSS
SaveExploits0References2
NVD
NVD
added 2014/03/18 5:2 p.m.20 views

CVE-2013-3938

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...

9.3CVSS8AI score0.03498EPSS
SaveExploits0References2
Prion
Prion
added 2014/03/18 5:2 p.m.26 views

Integer overflow

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...

9.3CVSS8.6AI score0.03498EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2014/03/18 2:0 p.m.53 views

CVE-2013-3938

XnView 2.13 is affected by a heap-based buffer overflow in the JXR file handling path. The vulnerability stems from an integer/NUM_ELEMENTS issue in an IFD_ENTRY structure processed by xnview.exe, which can lead to remote code execution. Affected product/version: XnView 2.13; vulnerable component...

9.3CVSS8.2AI score0.03498EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2014/03/18 2:0 p.m.25 views

CVE-2013-3938

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...

8AI score0.03498EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2014/03/18 12:0 a.m.60 views

KLA10404 ACE vulnerability in XnView

An integer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JXR file. Original advisories - Related products XnView CVE list CVE-2013-3938 critical Solution Update to...

9.3CVSS7.8AI score0.03498EPSS
SaveExploits0References2
seebug.org
seebug.org
added 2014/03/14 12:0 a.m.17 views

XnView JXR IFD_ENTRY处理整数溢出漏洞

XnView是一款浏览的图片查看器,支持多种图形格式。 由于当执行JXR文件中的IFDENTRY时xnview.exe存在证书溢出错误,可引起基于堆的缓冲区溢出。 0 XnView 2.13 目前厂商暂无提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.xnview.com/...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2014/02/05 12:0 a.m.36 views

XnView 1.92.1 - Command-Line Arguments Buffer Overflow

// source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may exploit this issue only if XnView is configured as a...

7.6CVSS5.2AI score0.11292EPSS
SaveExploits3
exploitpack
exploitpack
added 2014/02/05 12:0 a.m.13 views

XnView 1.92.1 - Command-Line Arguments Buffer Overflow

XnView 1.92.1 - Command-Line Arguments Buffer Overflow // source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...

0.9AI score
SaveExploits0
zdt
zdt
added 2014/02/05 12:0 a.m.42 views

XnView 1.92.1 Command-Line Arguments Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits source: http://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...

7.6CVSS6.6AI score0.11292EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2014/01/08 12:0 a.m.41 views

XnView 2.x < 2.13 Multiple Buffer Overflows

The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...

9.8CVSS7.9AI score0.02757EPSS
SaveExploits0References4
Check Point Advisories
Check Point Advisories
added 2013/09/29 12:0 a.m.39 views

XnView PCT File Processing Buffer Overflow (CVE-2013-2577)

A buffer overflow vulnerability exists in XnView. The vulnerability is due to a boundary error in processing image data in certain PCT files. An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted file. A successful attack can lead to arbitrary code execution ...

9.3CVSS9.5AI score0.11839EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2013/08/21 12:0 a.m.34 views

XnView PCT File Handling Buffer Overflow Vulnerability

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...

9.3CVSS6.9AI score0.11839EPSS
SaveExploits4References6
NVD
NVD
added 2013/08/09 9:55 p.m.37 views

CVE-2013-2577

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...

9.3CVSS7.6AI score0.11839EPSS
SaveExploits4References8
Prion
Prion
added 2013/08/09 9:55 p.m.22 views

Buffer overflow

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...

9.3CVSS8.3AI score0.11839EPSS
SaveExploits4References8Affected Software1
Cvelist
Cvelist
added 2013/08/09 9:0 p.m.40 views

CVE-2013-2577

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...

7.6AI score0.11839EPSS
SaveExploits4References8
CVE
CVE
added 2013/08/09 9:0 p.m.149 views

CVE-2013-2577

CVE-2013-2577 is a buffer overflow in XnView’s PCT file handling affecting 2.03 and earlier. A crafted PCT file can cause remote code execution, as demonstrated by Core Security/CoreLabs advisories and public proofs of concept. Public exploits exist (e.g., Exploit-DB CORE-2013-0705/27049), with v...

9.3CVSS7.7AI score0.11839EPSS
SaveExploits4References8Affected Software1
Kaspersky
Kaspersky
added 2013/08/09 12:0 a.m.46 views

KLA10403 ACE vulnerability in XnView

A buffer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PCT file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

9.3CVSS7.8AI score0.11839EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2013/07/30 12:0 a.m.39 views

XnView 2.x < 2.04 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is 2.x, earlier than 2.04. It is, therefore, reportedly affected by the following overflow vulnerabilities: - An unspecified error exists that could allow a buffer overflow during 'PCT' file handling. CVE-2013-2577 - Unspecified errors...

9.8CVSS8.7AI score0.11839EPSS
SaveExploits4References5
securityvulns
securityvulns
added 2013/07/29 12:0 a.m.31 views

XnView buffer overflow

Buffer overflow on .PCT parsing...

9.3CVSS4.9AI score0.11839EPSS
SaveExploits4References1Affected Software1
Rows per page
Query Builder