CVE-2012-0685: Integer Overflow
Published May 9, 2012
·Updated
Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684.
Affected Software
101 affected components
XnView xnview<=1.98.4
XnView xnview=1.0-a
XnView xnview=1.01
XnView xnview=1.02
XnView xnview=1.03
XnView xnview=1.04
XnView xnview=1.05
XnView xnview=1.05-b
XnView xnview=1.05-c
XnView xnview=1.06
XnView xnview=1.07
XnView xnview=1.08
XnView xnview=1.09
XnView xnview=1.10
XnView xnview=1.11
XnView xnview=1.12
XnView xnview=1.13
XnView xnview=1.14
XnView xnview=1.15
XnView xnview=1.16
XnView xnview=1.17
XnView xnview=1.17-a
XnView xnview=1.18
XnView xnview=1.18.1
XnView xnview=1.19
XnView xnview=1.20
XnView xnview=1.21
XnView xnview=1.22
XnView xnview=1.23
XnView xnview=1.24
XnView xnview=1.25
XnView xnview=1.25-a
XnView xnview=1.30
XnView xnview=1.31
XnView xnview=1.32
XnView xnview=1.33
XnView xnview=1.34
XnView xnview=1.35
XnView xnview=1.36
XnView xnview=1.37
XnView xnview=1.40
XnView xnview=1.41
XnView xnview=1.45
XnView xnview=1.46
XnView xnview=1.50
XnView xnview=1.50.1
XnView xnview=1.55
XnView xnview=1.60
XnView xnview=1.61
XnView xnview=1.65
XnView xnview=1.66
XnView xnview=1.67
XnView xnview=1.68
XnView xnview=1.68.1
XnView xnview=1.70
XnView xnview=1.70.2
XnView xnview=1.70.3
XnView xnview=1.70.4
XnView xnview=1.74
XnView xnview=1.80
XnView xnview=1.80.1
XnView xnview=1.80.2
XnView xnview=1.80.3
XnView xnview=1.82
XnView xnview=1.82.2
XnView xnview=1.82.3
XnView xnview=1.82.4
XnView xnview=1.90
XnView xnview=1.90.1
XnView xnview=1.90.3
XnView xnview=1.91
XnView xnview=1.91.1
XnView xnview=1.91.2
XnView xnview=1.91.3
XnView xnview=1.91.4
XnView xnview=1.91.5
XnView xnview=1.91.6
XnView xnview=1.92
XnView xnview=1.92.1
XnView xnview=1.93
XnView xnview=1.93.1
XnView xnview=1.93.2
XnView xnview=1.93.3
XnView xnview=1.93.4
XnView xnview=1.93.6
XnView xnview=1.94
XnView xnview=1.94.1
XnView xnview=1.94.2
XnView xnview=1.95
XnView xnview=1.95.1
XnView xnview=1.95.2
XnView xnview=1.95.3
XnView xnview=1.95.4
XnView xnview=1.96
XnView xnview=1.96.1
XnView xnview=1.96.2
XnView xnview=1.96.5
XnView xnview=1.97
XnView xnview=1.97.1
XnView xnview=1.97.2
XnView xnview=1.97.4
Remediation
Patch Available
Event History
May 9, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0685?
CVE-2012-0685 is classified with a critical severity due to its potential to allow remote code execution.
2
How do I fix CVE-2012-0685?
To fix CVE-2012-0685, upgrade XnView to version 1.98.5 or later, which addresses this vulnerability.
3
What versions of XnView are affected by CVE-2012-0685?
CVE-2012-0685 affects all versions of XnView prior to 1.98.5.
4
What type of vulnerability is CVE-2012-0685?
CVE-2012-0685 is an integer overflow vulnerability that can lead to arbitrary code execution.
5
Who discovered CVE-2012-0685?
CVE-2012-0685 was reported by security researchers monitoring vulnerabilities in software applications.