CORE-2013-0705 - XnView Buffer Overflow Vulnerability

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL: http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date...

XnView 2.03 - .pct Buffer Overflow

XnView 2.03 - .pct Buffer Overflow Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL:...

XnView 2.03 - '.pct' Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL: http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date...

XnView 2.03 (.PCT) - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL: http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date published:...

XnView Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-0705 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL:http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date published: 2013-07-22 Date of last update: 2013-07-22 Vendors contacted...

XnView 2.x < 2.03 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is 2.x, earlier than 2.03. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A stack-based buffer overflow exists in the 'XCF' image handling layer. CVE-2013-3246 - A heap-based buffer overflow exis...

XnView JLS File Decompression Heap Overflow

XnView JLS File Decompression Heap Overflow Summary XnView Formats PlugIn is prone to an overflow condition. The JLS Plugin xjpegls.dll library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a...

XnView buffer overflow

Buffer overflow on JLS files parsing...

XnView 1.99.1 - .JLS File Decompression Heap Overflow

XnView 1.99.1 - .JLS File Decompression Heap Overflow SUMMARY XnView Formats PlugIn is prone to an overflow condition. The JLS Plugin xjpegls.dll library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a...

XnView 1.99.1 - '.JLS' File Decompression Heap Overflow

SUMMARY XnView Formats PlugIn is prone to an overflow condition. The JLS Plugin xjpegls.dll library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a context-dependent attacker could potentially execute...

XnView < 1.99.1 JPEG Compressed TIFF Image Multiple Header Value Handling Overflow

The version of XnView installed on the remote Windows host is earlier than 1.99.1. It is, therefore, reportedly affected by a heap-based buffer overflow vulnerability. This is due to an error in the handling of TIFF image files having JPEG compression. Specially crafted files of this type can...

XnView PSD Record Type Parsing Integer Overflow Vulnerabilities (Windows)

This host has XnView installed and is prone to multiple integer overflow vulnerabilities. Vulnerabilities Insight: The flaws are due to integer overflow errors within the parsing of PSD record types and can be exploited to cause buffer overflows via a specially crafted PSD image. OpenVAS...

XnView Multiple Image Decompression Heap Overflow Vulnerabilities (Windows)

This host has XnView installed and is prone to multiple heap based buffer overflow vulnerabilities. Vulnerabilities Insight: - Insufficient validation when decompressing SGI32LogLum compressed TIFF images. - Insufficient validation when decompressing SGI32LogLum compressed TIFF images where the...

XnView Multiple Image Decompression Heap Overflow Vulnerabilities - Windows

XnView is prone to multiple heap based buffer overflow vulnerabilities SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView PSD Record Type Parsing Integer Overflow Vulnerabilities - Windows

XnView is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0282

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image...

CVE-2012-0277

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PCT image...

CVE-2012-0276

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a 1 SGI32LogLum compressed TIFF image or 2 SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to...

Heap overflow

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a 1 SGI32LogLum compressed TIFF image or 2 SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to...

Heap overflow

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PCT image...