ID de Prueba:	1.3.6.1.4.1.25623.1.0.802444
Categoría:	Buffer overflow
Título:	XnView Multiple Image Decompression Heap Overflow Vulnerabilities - Windows
Resumen:	XnView is prone to multiple heap based buffer overflow vulnerabilities
Descripción:	Summary: XnView is prone to multiple heap based buffer overflow vulnerabilities Vulnerability Insight: The following vulnerabilities exist: - Insufficient validation when decompressing SGI32LogLum compressed TIFF images. - Insufficient validation when decompressing SGI32LogLum compressed TIFF images where the PhotometricInterpretation encoding is set to LogL. - Insufficient validation when decompressing PCT images. - An indexing error when processing the ImageDescriptor structure of GIF images. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code on the system or cause a denial of service condition. Affected Software/OS: XnView versions prior to 1.99 on Windows Solution: Update to XnView version 1.99 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0276 http://www.exploit-db.com/exploits/19337 http://www.exploit-db.com/exploits/19338 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=48 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=49 http://secunia.com/advisories/48666 Common Vulnerability Exposure (CVE) ID: CVE-2012-0277 http://www.exploit-db.com/exploits/19336 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=50 Common Vulnerability Exposure (CVE) ID: CVE-2012-0282 http://www.exploit-db.com/exploits/19335 http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51 http://www.osvdb.org/83086
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.