XnView JPEG-LS Image Processing Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	55787
Class:	Boundary Condition Error
CVE:	CVE-2012-4988
Remote:	Yes
Local:	No
Published:	Oct 04 2012 12:00AM
Updated:	Oct 04 2012 12:00AM
Credit:	Joseph Sheridan from Reaction Information Security
Vulnerable:
Not Vulnerable:

XnView JPEG-LS Image Processing Heap Based Buffer Overflow Vulnerability

XnView is prone to a remote heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.

XnView 1.99 and 1.99.1 are vulnerable.

XnView JPEG-LS Image Processing Heap Based Buffer Overflow Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

XnView JPEG-LS Image Processing Heap Based Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

XnView JPEG-LS Image Processing Heap Based Buffer Overflow Vulnerability

References:

• XnView Homepage (XnView)
  
• XNVIEW JLS FILE DECOMPRESSION HEAP OVERFLOW (Reaction Information Security)