XnView MBM File Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	40852
Class:	Boundary Condition Error
CVE:	CVE-2010-1932
Remote:	Yes
Local:	No
Published:	Jun 14 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Mauro Olea
Vulnerable:	XnView XnView Standard 1.97.4 XnView XnView Standard 1.97.2 XnView XnView Standard 1.93.6 XnView XnView Standard 1.93.4 XnView XnView Standard 1.93.1 XnView XnView Standard 1.92.1 XnView XnView Standard 1.80.3 XnView XnView Standard 1.97 XnView XnView Standard 1.94 beta 1 XnView XnView Standard 1.92 XnView XnView Standard 1.91 XnView XnView Standard 1.70 XnView XnView Minimal 1.80.3 XnView XnView Complete 1.80.3 XnView XnView 1.90.3
Not Vulnerable:	XnView XnView Standard 1.97.5

XnView MBM File Remote Heap Buffer Overflow Vulnerability

XnView is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to XnView 1.97.5 are vulnerable.

XnView MBM File Remote Heap Buffer Overflow Vulnerability

The following proofs of concept are available:

• /data/vulnerabilities/exploits/40852.rar

XnView MBM File Remote Heap Buffer Overflow Vulnerability

Solution:
Updates are available; please see the references for more information.

XnView MBM File Remote Heap Buffer Overflow Vulnerability

References:

• XnView Homepage (XnView)
  
• XnView MBM Processing Heap Overflow (Core Security Technologies)