ACDSee XPM file handling buffer overflow

Added: 05/10/2007 CVE: CVE-2007-2193 BID: 23620 OSVDB: 35236 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl plug-in allows command execution when a user opens a specially crafted XPM file. Resolution Apply a fix...

Stack overflow

Stack-based buffer overflow in the IDX.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party...

CVE-2007-2194

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information...

CVE-2007-2193

ACDSee 9.0 (Build 108), ACDSee Pro 8.1 (Build 99), and ACDSee Photo Editor 4.0 (Build 195) are affected by a stack-based buffer overflow in the ID_X.apl plug-in when parsing XPM images. The vulnerability, triggered by a crafted XPM file with a long section string, allows a user-assisted remote at...

CVE-2007-2193

Stack-based buffer overflow in the IDX.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party...

CVE-2007-2194

CVE-2007-2194 affects XnView. A stack-based buffer overflow occurs while processing an XPM file with an overly long section string (greater than 1024 bytes), potentially enabling arbitrary code execution with the user’s privileges (XnView 1.90.3; affected packages include x11-misc/xnview

ACDSee 9.0 (.XPM File) Local Buffer Overflow Exploit

No description provided by source. / ACDSee v9.0 .XPM File Buffer Overflow ...

ACDSee 9.0 (.XPM File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== ACDSee 9.0 .XPM File Local Buffer Overflow Exploit ==================================================== / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffe...

ACDSee 9.0 - '.xpm' Local Buffer Overflow

/ ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffer overflow when processing a crafted .XPM file. This exploit runs calc.exe or binds shell to port 4444, and works against ACDSee and ACDSee Quick View. Tested against Win XP SP2 FR. Have Fun! Coded and discovered ...

XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= XnView 1.90.3 .XPM File Local Buffer Overflow Exploit ======================================================= / XnView 1.90.3 .XPM File Buffer Overflow XnView is vulnerable to a buffer...

ACDSee 9.0 - .xpm Local Buffer Overflow

ACDSee 9.0 - .xpm Local Buffer Overflow / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffer overflow when processing a crafted .XPM file. This exploit runs calc.exe or binds shell to port 4444, and works against ACDSee and ACDSee Quick View. Tested against Win XP...

XnView 1.90.3 - '.xpm' Local Buffer Overflow

/ XnView 1.90.3 .XPM File Buffer Overflow XnView is vulnerable to a buffer overflow while processing a crafted XPM File. It fails to check the length of the arguments passed to the defined array which leads to code execution. This exploit runs calc.exe or binds shell to port 4444. Tested against...

Debian DSA-911-1 : gtk+2.0 - several vulnerabilities

Several vulnerabilities have been found in gtk+2.0, the Gtk+ GdkPixBuf XPM image rendering library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2975 Ludwig Nussel discovered an infinite loop when processing XPM images that allows an attacker to...

Debian DSA-913-1 : gdk-pixbuf - several vulnerabilities

Several vulnerabilities have been found in gdk-pixbuf, the Gtk+ GdkPixBuf XPM image rendering library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2975 Ludwig Nussel discovered an infinite loop when processing XPM images that allows an attacker ...

CentOS 3 / 4 : gtk2 (CESA-2005:811)

Updated gtk2 packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A...

CentOS 3 / 4 : gdk-pixbuf (CESA-2005:810)

Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was fou...

CentOS 3 / 4 : openmotif (CESA-2005:412)

Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-92-1)

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

Ubuntu 4.10 / 5.04 / 5.10 : gtk+2.0, gdk-pixbuf vulnerabilities (USN-216-1)

Two integer overflows have been discovered in the XPM image loader of the GDK pixbuf library. By tricking an user into opening a specially crafted XPM image with any Gnome desktop application that uses this library, this could be exploited to execute arbitrary code with the privileges of the user...