1380 matches found
Stack overflow
XnView 2.03 has a stack-based buffer overflow vulnerability...
CVE-2013-3493
CVE-2013-3493 affects XnView 2.03 and is described as an integer overflow vulnerability. The connected documents confirm the affected product/version and the (root) cause as an overflow, with NVD listing both CVSS v2 (7.5, HIGH) and CVSS v3.1 (9.8, CRITICAL) metrics, indicating network attack vec...
CVE-2013-3493
XnView 2.03 has an integer overflow vulnerability...
CVE-2013-3492
The CVE-2013-3492 entry concerns XnView 2.03 and is documented to have a stack-based buffer overflow vulnerability in XnView. Affected software is XnView 2.03; the underlying cause is a stack-based overflow. The available connected documents confirm the vulnerability but do not provide specifics ...
CVE-2013-3492
XnView 2.03 has a stack-based buffer overflow vulnerability...
XnView RGB File Handling Buffer Overflow Vulnerability
XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphics and video files. A remote buffer overflow vulnerability exists in XnView, which originates when the program does...
XnView Buffer Overflow Vulnerability (CNVD-2020-50140)
XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphics and video files. A buffer overflow vulnerability exists in XnView version 2.04, which originates when the progra...
CVE-2013-3939
xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow...
CVE-2013-3941
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...
CVE-2013-3937
Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file...
CVE-2013-3247
Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file...
CVE-2013-3246
Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file...
Heap overflow
Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file...
Heap overflow
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...
Heap overflow
xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow...
Stack overflow
Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file...
Heap overflow
Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file...
CVE-2013-3246
CVE-2013-3246 describes a stack-based buffer overflow in XnView’s xnview.exe affecting XnView versions earlier than 2.03. An attacker can trigger arbitrary code execution by supplying a crafted XCF image layer, exploiting the stack overflow in the XCF image handling. Connected sources (NVD/Nessus...