XnView 1.98.8 TIFF Image Processing Heap Overflow (2)

No description provided by source. Application: XnView TIFF Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-15 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

XnView JXR File Handling Buffer Overflow Vulnerability

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...

CVE-2013-3938

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...

CVE-2013-3938

XnView 2.13 is affected by a heap-based buffer overflow in the JXR file handling path. The vulnerability stems from an integer/NUM_ELEMENTS issue in an IFD_ENTRY structure processed by xnview.exe, which can lead to remote code execution. Affected product/version: XnView 2.13; vulnerable component...

CVE-2013-3938

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUMELEMENTS field in an IFDENTRY structure in a JXR file, which triggers a heap-based buffer overflow...

KLA10404 ACE vulnerability in XnView

An integer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JXR file. Original advisories - Related products XnView CVE list CVE-2013-3938 critical Solution Update to...

XnView JXR IFD_ENTRY处理整数溢出漏洞

XnView是一款浏览的图片查看器，支持多种图形格式。 由于当执行JXR文件中的IFDENTRY时xnview.exe存在证书溢出错误，可引起基于堆的缓冲区溢出。 0 XnView 2.13 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.xnview.com/...

XnView 1.92.1 Command-Line Arguments Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits source: http://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...

XnView 1.92.1 - Command-Line Arguments Buffer Overflow

XnView 1.92.1 - Command-Line Arguments Buffer Overflow // source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may...

XnView 1.92.1 - Command-Line Arguments Buffer Overflow

// source: https://www.securityfocus.com/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers may exploit this issue only if XnView is configured as a...

XnView 2.x < 2.13 Multiple Buffer Overflows

The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...

XnView PCT File Processing Buffer Overflow (CVE-2013-2577)

A buffer overflow vulnerability exists in XnView. The vulnerability is due to a boundary error in processing image data in certain PCT files. An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted file. A successful attack can lead to arbitrary code execution ...

XnView PCT File Handling Buffer Overflow Vulnerability

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...

CVE-2013-2577

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...

Buffer overflow

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...

CVE-2013-2577

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file...

CVE-2013-2577

CVE-2013-2577 is a buffer overflow in XnView’s PCT file handling affecting 2.03 and earlier. A crafted PCT file can cause remote code execution, as demonstrated by Core Security/CoreLabs advisories and public proofs of concept. Public exploits exist (e.g., Exploit-DB CORE-2013-0705/27049), with v...

KLA10403 ACE vulnerability in XnView

A buffer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PCT file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

XnView 2.x < 2.04 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is 2.x, earlier than 2.04. It is, therefore, reportedly affected by the following overflow vulnerabilities: - An unspecified error exists that could allow a buffer overflow during 'PCT' file handling. CVE-2013-2577 - Unspecified errors...