XnView File Search Path Executable File Injection Vulnerability - Windows

XnView is prone to an executable file injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

Design/Logic Flaw

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

CVE-2011-1338

XnView on Windows is affected by an untrusted search path vulnerability in versions prior to 1.98.1. The flaw arises when loading executables via the Open containing folder path, allowing a local user to gain privileges by placing a Trojan horse .exe in a target folder. Impact: local privilege es...

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

XnView < 1.98.1 Insecure Executable Loading

The version of XnView installed on the remote Windows host is earlier than 1.98.1. As such, it reportedly uses unsafe methods for determining how to load executables. Specifically, there is an issue with the file search path, which could result in the insecure loading of executables when using th...

XnView may insecurely load executable files

Overview XnView may use unsafe methods for determining how to load executables .exe XnView is a software for viewing and converting graphic files. XnView loads certain executables when using the "Open containing folder" function. XnView contains an issue with the file search path, which may...

JVN#17844633: XnView may insecurely load executable files

XnView is a software for viewing and converting graphic files. XnView loads certain executables when using the "Open containing folder" function. XnView contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the...

XnView 1.98 Denial Of Service Proof Of Concept

done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5: 0c831c090f5a723d44bb641b175ca0e6 DoS i...

XnView 1.98 Denial of Service Vulnerability PoC

Exploit for windows platform in category dos / poc done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607...

XnView 1.98 - Denial of Service (PoC)

XnView 1.98 - Denial of Service PoC done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5:...

XnView 1.98 - Denial of Service (PoC)

done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5: 0c831c090f5a723d44bb641b175ca0e6 DoS i...

XnView 'MBM' Processing Buffer Overflow Vulnerability (Linux)

This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to improper bounds checking when processing 'MBM' MultiBitMap files, which could be exploited to cause a heap overflow. OpenVAS Vulnerabilities Test $Id:...

XnView 'MBM' Processing Buffer Overflow Vulnerability (Windows)

This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to improper bounds checking when processing 'MBM' MultiBitMap files, which could be exploited to cause a heap overflow. OpenVAS Vulnerabilities Test $Id:...

XnView 'MBM' Processing Buffer Overflow Vulnerability - Linux

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView 'MBM' Processing Buffer Overflow Vulnerability - Windows

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CORE-2010-0514: XnView MBM Processing Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ XnView MBM Processing Heap Overflow 1. Advisory Information Title: XnView MBM Processing Heap Overflow Advisory Id: CORE-2010-0514 Advisory URL:...

XnView buffer overflow

Buffer overflow on MBM images parsing...

CVE-2010-1932

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap MBM file with a Paint Data Section that contains a malformed Encoding field...

Heap overflow

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap MBM file with a Paint Data Section that contains a malformed Encoding field...