XnView - '.RAS' Image Processing Heap Overflow

Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 The Code...

XnView - '.ECW' Image Processing Heap Overflow

Application: XnView ECW Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-13 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 The Code...

XnView < 1.98.5 Multiple Integer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is earlier than 1.98.5. As such, it is reportedly affected by multiple integer overflow vulnerabilities. These vulnerabilities are related to the processing of PSD Adobe Photoshop record types. An attacker could exploit these...

CVE-2012-0685

The provided connected sources confirm a concrete issue: XnViewer/XnView before 1.98.5 contains integer overflow vulnerabilities in PSD record type parsing, affecting the Windows build. The root cause is overflow during PSD record type processing, enabling remote code execution when parsing craft...

CVE-2012-0685

Integer overflow in XnViewer aka XnView before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684...

CVE-2012-0684

XnViewer (XnView) is affected by an integer overflow in PSD record type parsing, enabling remote code execution. Reports cover XnView/XnViewer before version 1.98.5 (Windows). Multiple sources (NVD/OpenVAS/Red Hat) confirm the vulnerability and its classification as a PSD parsing overflow, indepe...

XnView < 1.98.6 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is earlier than 1.98.6. As such, it is reportedly affected by multiple buffer overflow vulnerabilities. These vulnerabilities are related to processing FPX and PCX files, and can also be triggered by certain directory names when browsing...

XnView JPEG2000 Plugin Buffer Overflow Vulnerability (Windows)

This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to an error in the JPEG2000 plugin in Xjp2.dll, when processing a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment. OpenVAS Vulnerabilities Test $Id:...

XnView Multiple Buffer Overflow Vulnerabilities - Mar12 (Windows)

This host has XnView installed and is prone to multiple heap based buffer overflow vulnerabilities. Vulnerabilities Insight: The flaws are due to - A signedness error in the FlashPix plugin Xfpx.dll when validating buffer sizes to process image's content. - An error when processing image data...

XnView JPEG2000 Plugin Buffer Overflow Vulnerability - Windows

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView Multiple Buffer Overflow Vulnerabilities (Mar 2012) - Windows

XnView is prone to multiple heap-based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView FlashPix Image Processing - Heap Overflow

XnView FlashPix Image Processing - Heap Overflow Application: XnView FlashPix Image Processing Heap Overflow Platforms: Windows Secunia: SA47388 PRL: 2012-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Repor...

XnView FlashPix Image Processing - Heap Overflow

Application: XnView FlashPix Image Processing Heap Overflow Platforms: Windows Secunia: SA47388 PRL: 2012-06 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 The Code...

xnview 1.98.5 - Multiple Vulnerabilities

xnview 1.98.5 - Multiple Vulnerabilities Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date...

xnview 1.98.5 - Multiple Vulnerabilities

Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date: 16 Feb 2012 Author: Luigi Auriemma...

CVE-2012-1051

Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

Heap overflow

Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

CVE-2012-1051

CVE-2012-1051 targets XnView’s JPEG2000 plug-in (Xjp2.dll) in XnView 1.98.5. A heap-based buffer overflow triggered by a crafted JPEG2000 (JP2) file with a Quantization Default (QCD) marker segment allows remote code execution. The OpenVAS entry corroborates the same flaw in the Windows JPEG2000 ...

CVE-2012-1051

Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

XnView File Search Path Executable File Injection Vulnerability (Windows)

This host has XnView installed and is prone to executable file injection vulnerability. Vulnerabilities Insight: The flaw is caused by an untrusted search path vulnerability when loading executables. OpenVAS Vulnerabilities Test $Id: gbxnviewcodeexecvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $...