Gentoo Security Advisory GLSA 200512-18 (xnview)

The remote host is missing updates announced in advisory GLSA 200512-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200707-06 (xnview)

The remote host is missing updates announced in advisory GLSA 200707-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView 1.93.6 for Windows .taac Local Buffer Overflow Exploit PoC

No description provided by source. include stdio.h include stdlib.h / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to...

XnView 1.93.6 - .taac Local Buffer Overflow

XnView 1.93.6 - .taac Local Buffer Overflow include include / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to cause a stack-based buffer overflow ...

XnView 1.93.6 for Windows .taac Local Buffer Overflow Exploit PoC

Exploit for unknown platform in category local exploits ================================================================= XnView 1.93.6 for Windows .taac Local Buffer Overflow Exploit PoC ================================================================= include include / XnView 1.93.6 for Windows...

XnView 1.93.6 - '.taac' Local Buffer Overflow

include include / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into viewing a...

XnView产品TAAC文件解析栈溢出漏洞

BUGTRAQ ID: 29851 CVECAN ID: CVE-2008-2427 XnView是一款浏览的图片查看器，支持多种图形格式。 XnView在处理Sun TAAC文件的format关键字时存在栈溢出漏洞，如果用户受骗打开了特制的Sun TAAC文件就会触发这个溢出，导致执行任意指令。 0 XnView XnView 1.93.6 for Windows XnView XnView 1.70 for Linux/FreeBSD XnView NConvert 4.92 XnView GFL SDK 2.82 XnView ------...

CVE-2008-2427

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

Stack overflow

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

CVE-2008-2427

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

CVE-2008-2427

The CVE-2008-2427 issue affects XnView, NConvert, and GFL SDK: a stack-based buffer overflow when parsing the Sun TAAC file’s format keyword, impacting XnView 1.93.6 (Windows) and 1.70 (Linux/FreeBSD), NConvert 4.92, and GFL SDK 2.82. The root cause is a boundary/error in processing the format ke...

XnView / NConvert / GFL SDK buffer overflow

Buffer overflow on oversized Sun TAAC files 'format' field...

Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow

====================================================================== Secunia Research 20/06/2008 - XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow - ====================================================================== Table of Contents Affected...

XnView 1.92.1 Slideshow (FontName) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English...

XnView幻灯片FontName参数栈溢出漏洞

CVECAN ID: CVE-2008-0069 XnView是一款浏览的图片查看器，支持多种图形格式。 XnView在处理幻灯片文件（.sld）的FontName参数时存在栈溢出漏洞，如果用户受骗打开了带有超长参数的幻灯片文件的话，就可以触发这个溢出，导致执行任意指令。 0 XnView XnView 1.92.1 XnView XnView 1.92 XnView ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a href=http://pagesperso-orange.fr/pierre.g/xnview/endownload.html...

xnview1921-overflow.txt

!/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English Found by : Stefan Cornelius, Secunia Research...

CVE-2008-0069

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...

Stack overflow

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...

CVE-2008-0069

CVE-2008-0069 is a stack-based buffer overflow in XnView 1.92/1.92.1 triggered by a long FontName parameter in a slideshow (.sld) file, allowing user‑assisted remote code execution. The vulnerability uses a vector different from CVE-2008-1461; affected versions are XnView 1.92 and 1.92.1 (per the...

CVE-2008-0069

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...