XnView CVE-2013-2577 Remote Buffer Overflow Vulnerability
BID:61397
Info
XnView CVE-2013-2577 Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 61397 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-2577 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 22 2013 12:00AM |
| Updated: | Jul 22 2013 12:00AM |
| Credit: | Ricardo Narvaja from Core Exploit Writers Team |
| Vulnerable: |
XnView XnView 2.03 |
| Not Vulnerable: |
XnView XnView 2.04 |
Discussion
XnView CVE-2013-2577 Remote Buffer Overflow Vulnerability
XnView is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
XnView 2.03 is vulnerable; other versions may also be affected.
XnView is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
XnView 2.03 is vulnerable; other versions may also be affected.
Exploit / POC
XnView CVE-2013-2577 Remote Buffer Overflow Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
References
XnView CVE-2013-2577 Remote Buffer Overflow Vulnerability
References:
References:
- XnView 2.04 (XnView)
- XnView Buffer Overflow Vulnerability (Core Security)
- XnView Homepage (XnView)