CVE-2012-0685

Integer overflow in XnViewer aka XnView before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684...

CVE-2012-0685

The provided connected sources confirm a concrete issue: XnViewer/XnView before 1.98.5 contains integer overflow vulnerabilities in PSD record type parsing, affecting the Windows build. The root cause is overflow during PSD record type processing, enabling remote code execution when parsing craft...

Vulnerabilities in XnViewer Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of two integer overflow vulnerabilities affecting XnViewer version 1.98.2 and earlier versions. Microsoft discovered and disclosed the vulnerabilities under coordinated vulnerability disclosure to the affected...