critical10.0Public exploit code
CVE-2007-2194
Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XnView 1.90.3 - '.xpm' Local Buffer Overflow2007-04-22 · local · windows · Verified
Impact
Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gentoo | Xnview | Version 1.90.3 |
References
- NVD record
- CVE.org record
- http://osvdb.org/35235
- http://secunia.com/advisories/24973
- http://secunia.com/advisories/26006
- http://security.gentoo.org/glsa/glsa-200707-06.xml
- http://www.securityfocus.com/bid/23625
- http://www.vupen.com/english/advisories/2007/1488
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33810
- https://www.exploit-db.com/exploits/3777
- http://osvdb.org/35235
- http://secunia.com/advisories/24973
- http://secunia.com/advisories/26006
- http://security.gentoo.org/glsa/glsa-200707-06.xml
- http://www.securityfocus.com/bid/23625
- http://www.vupen.com/english/advisories/2007/1488
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33810
- https://www.exploit-db.com/exploits/3777