CVE-2012-0282: Buffer Overflow
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0282?
CVE-2012-0282 is classified as a high severity vulnerability due to its potential to cause denial of service and allow arbitrary code execution.
How do I fix CVE-2012-0282?
To mitigate CVE-2012-0282, users should upgrade to XnView version 1.99 or later.
What types of attacks can exploit CVE-2012-0282?
CVE-2012-0282 can be exploited through crafted GIF images that trigger a heap-based buffer overflow.
What is affected by CVE-2012-0282?
The vulnerability affects versions of XnView prior to 1.99, specifically up to version 1.98.8.
Can CVE-2012-0282 lead to data loss?
Exploiting CVE-2012-0282 can cause application crashes, which may result in temporary data loss if unsaved work is present.