CVE-2007-2194

CVE-2007-2194 affects XnView. A stack-based buffer overflow occurs while processing an XPM file with an overly long section string (greater than 1024 bytes), potentially enabling arbitrary code execution with the user’s privileges (XnView 1.90.3; affected packages include x11-misc/xnview

CVE-2007-2194: Undefined Security Weakness

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information...

XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit

No description provided by source. / XnView 1.90.3 .XPM File Buffer Overflow ...

XnView 1.90.3 - .xpm Local Buffer Overflow

XnView 1.90.3 - .xpm Local Buffer Overflow / XnView 1.90.3 .XPM File Buffer Overflow XnView is vulnerable to a buffer overflow while processing a crafted XPM File. It fails to check the length of the arguments passed to the defined array which leads to code execution. This exploit runs calc.exe o...

XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= XnView 1.90.3 .XPM File Local Buffer Overflow Exploit ======================================================= / XnView 1.90.3 .XPM File Buffer Overflow XnView is vulnerable to a buffer...

XnView 1.90.3 - '.xpm' Local Buffer Overflow

/ XnView 1.90.3 .XPM File Buffer Overflow XnView is vulnerable to a buffer overflow while processing a crafted XPM File. It fails to check the length of the arguments passed to the defined array which leads to code execution. This exploit runs calc.exe or binds shell to port 4444. Tested against...

NView / XNView multimedia viewer / browser privilege escalation

Dynamic libraries from current directory are loaded on startup...

[ GLSA 200512-18 ] XnView: Privilege escalation

Gentoo Linux Security Advisory GLSA 200512-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-4595

CVE-2005-4595 describes an untrusted search path (RPATH/DT_RPATH) vulnerability in XnView 1.70 and NView 4.51 on Gentoo Linux. The dynamic loader could search in untrusted directories for shared libraries, enabling a local attacker to execute arbitrary code with the privileges of the user running...

CVE-2005-4595

Untrusted search path vulnerability RPATH in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory...

CVE-2005-4595: Undefined Security Weakness

Untrusted search path vulnerability RPATH in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory...

CVE-2005-4595

Untrusted search path vulnerability RPATH in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory...

GLSA-200512-18 : XnView: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200512-18 XnView: Privilege escalation Krzysiek Pawlik of Gentoo Linux discovered that the XnView package for IA32 used the DTRPATH field insecurely, causing the dynamic loader to search for shared libraries in potentially untrust...

[SA18235] XnView / NView Insecure RPATH Vulnerability

TITLE: XnView / NView Insecure RPATH Vulnerability SECUNIA ADVISORY ID: SA18235 VERIFY ADVISORY: http://secunia.com/advisories/18235/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: XnView 1.x http://secunia.com/product/6705/ NView 4.x...

XnView: Privilege escalation

Background XnView is an efficient multimedia viewer, browser and converter, distributed free for non-commercial use. Description Krzysiek Pawlik of Gentoo Linux discovered that the XnView package for IA32 used the DTRPATH field insecurely, causing the dynamic loader to search for shared libraries...