medium6.8Public exploit code
CVE-2012-0282
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XnView 1.98.8 - '.gif' Image Processing Heap Overflow2012-06-22 · dos · windows · Verified
Impact
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xnview | Xnview | through 1.98.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858
- http://secunia.com/advisories/48666
- http://www.exploit-db.com/exploits/19335
- http://www.osvdb.org/83086
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51
- http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858
- http://secunia.com/advisories/48666
- http://www.exploit-db.com/exploits/19335
- http://www.osvdb.org/83086
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51