XnView Multiple Image Decompression Memory Corruption Vulnerabilities
BID:54125
Info
XnView Multiple Image Decompression Memory Corruption Vulnerabilities
| Bugtraq ID: | 54125 |
| Class: | Unknown |
| CVE: |
CVE-2012-0276 CVE-2012-0277 CVE-2012-0282 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2012 12:00AM |
| Updated: | Jun 22 2012 11:00PM |
| Credit: | Francis Provencher via Secunia |
| Vulnerable: |
XnView XnView 1.98.8 |
| Not Vulnerable: | |
Discussion
XnView Multiple Image Decompression Memory Corruption Vulnerabilities
XnView is prone to multiple memory-corruption vulnerabilities.
Successful exploit of these issues allows an attacker to run arbitrary code in the context of the vulnerable application. Failed exploits can cause a denial-of-service condition.
XnView 1.98.8 is vulnerable; other versions may also be affected.
XnView is prone to multiple memory-corruption vulnerabilities.
Successful exploit of these issues allows an attacker to run arbitrary code in the context of the vulnerable application. Failed exploits can cause a denial-of-service condition.
XnView 1.98.8 is vulnerable; other versions may also be affected.
Exploit / POC
XnView Multiple Image Decompression Memory Corruption Vulnerabilities
The researcher who discovered these issues has created a proof-of-concept. Please see the references for more information.
The researcher who discovered these issues has created a proof-of-concept. Please see the references for more information.
References
XnView Multiple Image Decompression Memory Corruption Vulnerabilities
References:
References:
- XnView Homepage (XnView)
- XnView GIF Image Processing Heap Overflow (Francis Provencher)
- XnView PCT Image Processing Heap Overflow (Francis Provencher)
- XnView TIFF Image Processing Heap Overflow (Francis Provencher)
- XnView TIFF Image Processing Heap Overflow (Francis Provencher)