CVE-2008-2427: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow

====================================================================== Secunia Research 20/06/2008 - XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow - ====================================================================== Table of Contents Affected...

XnView / NConvert / GFL SDK buffer overflow

Buffer overflow on oversized Sun TAAC files 'format' field...

xnview1921-overflow.txt

!/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English Found by : Stefan Cornelius, Secunia Research...

XnView 1.92.1 Slideshow (FontName) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English...

XnView幻灯片FontName参数栈溢出漏洞

CVECAN ID: CVE-2008-0069 XnView是一款浏览的图片查看器，支持多种图形格式。 XnView在处理幻灯片文件（.sld）的FontName参数时存在栈溢出漏洞，如果用户受骗打开了带有超长参数的幻灯片文件的话，就可以触发这个溢出，导致执行任意指令。 0 XnView XnView 1.92.1 XnView XnView 1.92 XnView ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a href=http://pagesperso-orange.fr/pierre.g/xnview/endownload.html...

Stack overflow

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...

CVE-2008-0069

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...

CVE-2008-0069

CVE-2008-0069 is a stack-based buffer overflow in XnView 1.92/1.92.1 triggered by a long FontName parameter in a slideshow (.sld) file, allowing user‑assisted remote code execution. The vulnerability uses a vector different from CVE-2008-1461; affected versions are XnView 1.92 and 1.92.1 (per the...

CVE-2008-0069

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...

XnView 1.92.1 Slideshow (FontName) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================== XnView 1.92.1 Slideshow FontName Buffer Overflow Exploit ========================================================== !/usr/bin/perl...

XnView 1.92.1 - 'FontName' Slideshow Buffer Overflow

!/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English Found by : Stefan Cornelius, Secunia Research...

CVE-2008-0069: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow .sld file, a different vector than CVE-2008-1461...

XnView 1.92.1 - FontName Slideshow Buffer Overflow

XnView 1.92.1 - FontName Slideshow Buffer Overflow !/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro Engli...

Buffer overflow

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

CVE-2008-1461

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

CVE-2008-1461

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

CVE-2008-1461

CVE-2008-1461 affects XnView 1.92.1. It is a buffer-overflow vulnerability in the command-line filename argument, allowing a user-assisted remote attacker to potentially execute arbitrary code in the context of the running user. Exploit details in public writeups describe an attack condition wher...

CVE-2008-1461: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

XnView超长文件名缓冲区溢出漏洞

BUGTRAQ ID: 28259 XnView是一款浏览的图片查看器，支持多种图形格式。 XnView处理超长的文件名时存在缓冲区溢出漏洞，XnView加载超长文件名命令行参数时发生缓冲区溢出，导致执行任意指令。 0 XnView 1.92.1 XnView ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a href=http://www.xnview.com/ target=blankhttp://www.xnview.com//a http://www.click-internet.fr/index.php?cki=News&news=9...