CVE-2008-1461

CVE-2008-1461 affects XnView 1.92.1. It is a buffer-overflow vulnerability in the command-line filename argument, allowing a user-assisted remote attacker to potentially execute arbitrary code in the context of the running user. Exploit details in public writeups describe an attack condition wher...

CVE-2008-1461: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker...

XnView超长文件名缓冲区溢出漏洞

BUGTRAQ ID: 28259 XnView是一款浏览的图片查看器，支持多种图形格式。 XnView处理超长的文件名时存在缓冲区溢出漏洞，XnView加载超长文件名命令行参数时发生缓冲区溢出，导致执行任意指令。 0 XnView 1.92.1 XnView ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a href=http://www.xnview.com/ target=blankhttp://www.xnview.com//a http://www.click-internet.fr/index.php?cki=News&news=9...

xnview-overflow.txt

-------- XNview -------- Informations : Version : 1.92.1 Website : http://www.xnview.com/ Problem : Long Filename Overflow Description: XnView is an efficient multimedia viewer, browser, and converter. It supports more than 400 graphic file formats PNG, JPEG, TARGA, TIFF, GIF, BMP, and more...

XNview 1.92.1 Long Filename Overflow

-------- XNview -------- Informations : Version : 1.92.1 Website : http://www.xnview.com/ Problem : Long Filename Overflow Description: XnView is an efficient multimedia viewer, browser, and converter. It supports more than 400 graphic file formats PNG, JPEG, TARGA, TIFF, GIF, BMP, and more...

XNView buffer overflow

Buffer overflow on oversized filename...

Stack overflow

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

CVE-2008-0064 is a stack-based buffer overflow vulnerability affecting XnView (versions 1.91/1.92), NConvert 4.85, and libgfl280.dll in GFL SDK 2.870 for Windows. The underlying bug is triggered while processing Radiance RGBE (.hdr) files, allowing a user‑assisted remote attacker to execute arbit...

CVE-2008-0064: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

XnView RGBE File Handling Buffer Overflow

XnView, an application to view and convert graphic files, is installed on the remote host. The version of XnView on the remote host reportedly contains a stack- based buffer overflow that can be triggered when reading a specially- crafted Radiance RGBE '.hdr' file. If an attacker can trick a user...

GLSA-200707-06 : XnView: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200707-06 XnView: Stack-based buffer overflow XnView is vulnerable to a stack-based buffer overflow while processing an XPM file with an overly long section string greater than 1024 bytes. Impact : An attacker could entice a user ...

XnView buffer overflow

Buffer overflow on parsing XPM image files...

[ GLSA 200707-06 ] XnView: Stack-based buffer overflow

Gentoo Linux Security Advisory GLSA 200707-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

XnView: Stack-based buffer overflow

Background XnView is software to view and convert graphics files. XPixMap XPM is a simple ascii-based graphics format. Description XnView is vulnerable to a stack-based buffer overflow while processing an XPM file with an overly long section string greater than 1024 bytes. Impact An attacker coul...

abcview-overflow.txt

/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...

FreshView 7.15 (.PSP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================== FreshView 7.15 .PSP File Buffer Overflow Exploit ================================================== / FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffe...

FreshView 7.15 - '.psp' Local Buffer Overflow

/ FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in XnView to see...

ABC-View Manager 1.42 - '.psp' Local Buffer Overflow

/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...