CVSS: 9.3EPSS: 13%CPEs: 117EXPL: 4CVE-2013-2577 – XnView 2.03 - '.pct' Buffer Overflow
https://notcve.org/view.php?id=CVE-2013-2577
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Desbordamiento de búfer en XnView anterior a v2.04 permite a atacantes remotos ejecutar código arbitrario a través de un archivo PCT manipulado. • https://www.exploit-db.com/exploits/27049 http://archives.neohapsis.com/archives/bugtraq/2013-07/0153.html http://newsgroup.xnview.com/viewtopic.php?f=35&t=28400 http://osvdb.org/95580 http://secunia.com/advisories/54174 http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability http://www.exploit-db.com/exploits/27049 http://www.securitytracker.com/id/1028817 https://exchange.xforce.ibmcloud.com/vulnerabilities/85919 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 14%CPEs: 2EXPL: 1CVE-2012-4988 – XnView 1.99.1 - '.JLS' File Decompression Heap Overflow
https://notcve.org/view.php?id=CVE-2012-4988
Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file. Desbordamiento de buffer basado en memoria dinámica en el plugin de formato xjpegls.dll (también conocido como JLS, JPEG-LS o JPEG lossless) en XnView 1.99 y 1.99.1 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen JLS manipulado. • https://www.exploit-db.com/exploits/21741 http://osvdb.org/show/osvdb/85893 http://seclists.org/fulldisclosure/2012/Oct/36 http://secunia.com/advisories/50825 http://www.reactionpenetrationtesting.co.uk/xnview-jls-heap.html http://www.securityfocus.com/bid/55787 https://exchange.xforce.ibmcloud.com/vulnerabilities/79030 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 15%CPEs: 1EXPL: 2CVE-2012-0282 – XnView 1.98.8 - '.gif' Image Processing Heap Overflow
https://notcve.org/view.php?id=CVE-2012-0282
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image. Una vulnerabilidad de desbordamiento de pila basado en búfer en XnView anterior a v1.99 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario a través de un valor ImageLeftPosition diseñado en una estructura ImageDescriptor en una imagen GIF. • https://www.exploit-db.com/exploits/19335 http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 http://secunia.com/advisories/48666 http://www.exploit-db.com/exploits/19335 http://www.osvdb.org/83086 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 15%CPEs: 1EXPL: 4CVE-2012-0276 – XnView 1.98.8 - '.tiff' Image Processing Heap Overflow
https://notcve.org/view.php?id=CVE-2012-0276
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL. Múltiples desbordamientos de buffer de memoria dinámica en XnView anterior a v1.99 permite a los atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario a través de un (1) imagen SGI32LogLum TIFF comprimido o (2) SGI32LogLum imagen TIFF comprimido con el conjunto de codificación photometricinterpretation a logL. • https://www.exploit-db.com/exploits/19337 https://www.exploit-db.com/exploits/19338 http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 http://secunia.com/advisories/48666 http://www.exploit-db.com/exploits/19337 http://www.exploit-db.com/exploits/19338 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=48 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=49 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 8%CPEs: 1EXPL: 2CVE-2012-0277 – XnView 1.98.8 - '.PCT' Image Processing Heap Overflow
https://notcve.org/view.php?id=CVE-2012-0277
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image. Desbordamiento de bufer basado en memoria dinámica (heap) en XnView anterior a v1.99 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario a través de una elaborada imagen de PCT. • https://www.exploit-db.com/exploits/19336 http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858 http://secunia.com/advisories/48666 http://www.exploit-db.com/exploits/19336 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=50 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •