CVE-2009-4001: Buffer Overflow
Published Mar 12, 2010
·Updated
Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow.
Affected Software
98 affected components
XnView xnview=1.80.1
XnView xnview=1.08
XnView xnview=1.55
XnView xnview=1.93.2
XnView xnview=1.30
XnView xnview=1.92.1
XnView xnview=1.32
XnView xnview=1.25
XnView xnview=1.91
XnView xnview=1.05-b
XnView xnview=1.95.3
XnView xnview=1.50.1
XnView xnview=1.93.6
XnView xnview=1.90.3
XnView xnview=1.09
XnView xnview=1.01
XnView xnview=1.17
XnView xnview=1.93.3
XnView xnview=1.05
XnView xnview=1.93.1
XnView xnview=1.80.3
XnView xnview=1.41
XnView xnview=1.35
XnView xnview=1.23
XnView xnview=1.94.1
XnView xnview=1.40
XnView xnview=1.07
XnView xnview=1.60
XnView xnview=1.70.2
XnView xnview=1.70
XnView xnview=1.17-a
XnView xnview=1.21
XnView xnview=1.92
XnView xnview=1.16
XnView xnview=1.14
XnView xnview=1.90
XnView xnview=1.95.4
XnView xnview=1.04
XnView xnview=1.94.2
XnView xnview=1.18.1
XnView xnview=1.37
XnView xnview=1.90.1
XnView xnview=1.19
XnView xnview=1.61
XnView xnview=1.80
XnView xnview=1.96.5
XnView xnview=1.68
XnView xnview=1.82.2
XnView xnview=1.05-c
XnView xnview=1.02
XnView xnview=1.91.1
XnView xnview=1.12
XnView xnview=1.91.2
XnView xnview=1.25-a
XnView xnview=1.15
XnView xnview=1.97
XnView xnview=1.46
XnView xnview=1.91.3
XnView xnview=1.96
XnView xnview=1.24
XnView xnview=1.67
XnView xnview=1.20
XnView xnview=1.91.5
XnView xnview=1.33
XnView xnview=1.93.4
XnView xnview=1.95.2
XnView xnview=1.18
XnView xnview=1.82.4
XnView xnview=1.50
XnView xnview=1.45
XnView xnview=1.93
XnView xnview=1.0-a
XnView xnview=1.91.4
XnView xnview=1.13
XnView xnview<=1.97.1
XnView xnview=1.96.1
XnView xnview=1.22
XnView xnview=1.66
XnView xnview=1.70.3
XnView xnview=1.65
XnView xnview=1.74
XnView xnview=1.10
XnView xnview=1.34
XnView xnview=1.95
XnView xnview=1.31
XnView xnview=1.91.6
XnView xnview=1.94
XnView xnview=1.95.1
XnView xnview=1.82
XnView xnview=1.80.2
XnView xnview=1.68.1
XnView xnview=1.03
XnView xnview=1.36
XnView xnview=1.70.4
XnView xnview=1.11
XnView xnview=1.82.3
XnView xnview=1.06
XnView xnview=1.96.2
Remediation
Patch Available
Event History
Mar 12, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Mar 15, 2010
Data Sourced
via NVD·01:28 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4001?
CVE-2009-4001 has been classified with a high severity due to its potential for remote code execution.
2
How do I fix CVE-2009-4001?
To mitigate CVE-2009-4001, upgrade XnView to version 1.97.2 or later, as this version addresses the vulnerability.
3
What types of attacks can exploit CVE-2009-4001?
CVE-2009-4001 can be exploited by sending a specially crafted DICOM image that triggers an integer overflow, leading to arbitrary code execution.
4
Which versions of XnView are affected by CVE-2009-4001?
CVE-2009-4001 affects multiple versions of XnView prior to 1.97.2, including versions as low as 1.0-a.
5
What is the nature of the vulnerability described in CVE-2009-4001?
CVE-2009-4001 is an integer overflow vulnerability that can lead to a heap-based buffer overflow in XnView.