Test Kennung:	1.3.6.1.4.1.25623.1.0.802444
Kategorie:	Buffer overflow
Titel:	XnView Multiple Image Decompression Heap Overflow Vulnerabilities - Windows
Zusammenfassung:	XnView is prone to multiple heap based buffer overflow vulnerabilities
Beschreibung:	Summary: XnView is prone to multiple heap based buffer overflow vulnerabilities Vulnerability Insight: The following vulnerabilities exist: - Insufficient validation when decompressing SGI32LogLum compressed TIFF images. - Insufficient validation when decompressing SGI32LogLum compressed TIFF images where the PhotometricInterpretation encoding is set to LogL. - Insufficient validation when decompressing PCT images. - An indexing error when processing the ImageDescriptor structure of GIF images. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code on the system or cause a denial of service condition. Affected Software/OS: XnView versions prior to 1.99 on Windows Solution: Update to XnView version 1.99 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0276 http://www.exploit-db.com/exploits/19337 http://www.exploit-db.com/exploits/19338 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=48 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=49 http://secunia.com/advisories/48666 Common Vulnerability Exposure (CVE) ID: CVE-2012-0277 http://www.exploit-db.com/exploits/19336 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=50 Common Vulnerability Exposure (CVE) ID: CVE-2012-0282 http://www.exploit-db.com/exploits/19335 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51 http://www.osvdb.org/83086
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.