XnView 1.98 Denial Of Service Proof Of Concept

done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5: 0c831c090f5a723d44bb641b175ca0e6 DoS i...

XnView 1.98 - Denial of Service (PoC)

XnView 1.98 - Denial of Service PoC done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5:...

XnView 'MBM' Processing Buffer Overflow Vulnerability (Linux)

This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to improper bounds checking when processing 'MBM' MultiBitMap files, which could be exploited to cause a heap overflow. OpenVAS Vulnerabilities Test $Id:...

XnView 'MBM' Processing Buffer Overflow Vulnerability (Windows)

This host has XnView installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to improper bounds checking when processing 'MBM' MultiBitMap files, which could be exploited to cause a heap overflow. OpenVAS Vulnerabilities Test $Id:...

XnView 'MBM' Processing Buffer Overflow Vulnerability - Linux

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView 'MBM' Processing Buffer Overflow Vulnerability - Windows

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XnView buffer overflow

Buffer overflow on MBM images parsing...

CORE-2010-0514: XnView MBM Processing Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ XnView MBM Processing Heap Overflow 1. Advisory Information Title: XnView MBM Processing Heap Overflow Advisory Id: CORE-2010-0514 Advisory URL:...

CVE-2010-1932

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap MBM file with a Paint Data Section that contains a malformed Encoding field...

Heap overflow

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap MBM file with a Paint Data Section that contains a malformed Encoding field...

CVE-2010-1932

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap MBM file with a Paint Data Section that contains a malformed Encoding field...

CVE-2010-1932

CVE-2010-1932 affects XnView 1.97.4 and possibly earlier, via a heap-based overflow when parsing MBM Paint Data Section encoding. The vulnerability stems from a malformed Encoding field in an MBM file, which the MBM hander processes, potentially leading to remote arbitrary code execution. CoreLab...

CVE-2010-1932: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap MBM file with a Paint Data Section that contains a malformed Encoding field...

XnView 1.97.4 - '.MBM' File Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/40852/info XnView is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

XnView MBM Processing Heap Overflow

Advisory ID Internal CORE-2010-0514 1. Advisory Information Title: XnView MBM Processing Heap Overflow Advisory Id: CORE-2010-0514 Advisory URL:http://www.coresecurity.com/content/xnview-mbm-heap-overflow Date published: 2010-06-14 Date of last update: 2010-06-14 Vendors contacted: XnView Release...

XnView 1.97.4 - .MBM File Remote Heap Buffer Overflow

XnView 1.97.4 - .MBM File Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/40852/info XnView is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this iss...

XnView Version Detection (Linux)

This script detects the installed version of XnView and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodxnviewdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ XnView Version Detection Linux Authors: Rachana Shetty Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

XnView DICOM Parsing Integer Overflow Vulnerability (Linux)

This host has XnView installed and is prone to integer overflow vulnerability. Vulnerabilities Insight: The flaw is due to integer overflow when processing DICOM images with certain dimensions. This can be exploited to cause a heap-based buffer overflow by persuading a victim to open a...

XnView DICOM Parsing Integer Overflow Vulnerability (Windows)

This host has XnView installed and is prone to integer overflow vulnerability. Vulnerabilities Insight: The flaw is due to integer overflow when processing DICOM images with certain dimensions. This can be exploited to cause a heap-based buffer overflow by persuading a victim to open a...

XnView DICOM Parsing Integer Overflow Vulnerability - Windows

XnView is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...