First published: Tue Jul 17 2012(Updated: )
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image.
Credit: PSIRT-CNA@flexerasoftware.com
Affected Software | Affected Version | How to fix |
---|---|---|
Xnview Xnview | <=1.98.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0277 is classified as a high severity vulnerability due to the potential for remote code execution and application crashes.
To mitigate CVE-2012-0277, you should upgrade XnView to version 1.99 or later.
CVE-2012-0277 is associated with remote code execution and denial of service attacks via crafted PCT images.
XnView versions prior to 1.99 and up to 1.98.8 are affected by CVE-2012-0277.
While CVE-2012-0277 primarily causes denial of service and potential remote code execution, successful exploitation may compromise sensitive data.