CVE-2012-2614

CVE-2012-2614 concerns Lattice Diamond Programmer 1.4.2 for Windows, where a buffer overflow in programmer.exe can be triggered by a specially crafted .xcf file (version attribute in ispXCF element). The vulnerability supports arbitrary code execution and denial of service, as described in Core S...