CVE-2013-2577: Buffer Overflow
Published Aug 9, 2013
·Updated
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.
Affected Software
117 affected components
XnView xnview<=2.03
XnView xnview=1.0-a
XnView xnview=1.01
XnView xnview=1.02
XnView xnview=1.03
XnView xnview=1.04
XnView xnview=1.05
XnView xnview=1.05-b
XnView xnview=1.05-c
XnView xnview=1.06
XnView xnview=1.07
XnView xnview=1.08
XnView xnview=1.09
XnView xnview=1.10
XnView xnview=1.11
XnView xnview=1.12
XnView xnview=1.13
XnView xnview=1.14
XnView xnview=1.15
XnView xnview=1.16
XnView xnview=1.17
XnView xnview=1.17-a
XnView xnview=1.18
XnView xnview=1.18.1
XnView xnview=1.19
XnView xnview=1.20
XnView xnview=1.21
XnView xnview=1.22
XnView xnview=1.23
XnView xnview=1.24
XnView xnview=1.25
XnView xnview=1.25-a
XnView xnview=1.30
XnView xnview=1.31
XnView xnview=1.32
XnView xnview=1.33
XnView xnview=1.34
XnView xnview=1.35
XnView xnview=1.36
XnView xnview=1.37
XnView xnview=1.40
XnView xnview=1.41
XnView xnview=1.45
XnView xnview=1.46
XnView xnview=1.50
XnView xnview=1.50.1
XnView xnview=1.55
XnView xnview=1.60
XnView xnview=1.61
XnView xnview=1.65
XnView xnview=1.66
XnView xnview=1.67
XnView xnview=1.68
XnView xnview=1.68.1
XnView xnview=1.70
XnView xnview=1.70.2
XnView xnview=1.70.3
XnView xnview=1.70.4
XnView xnview=1.74
XnView xnview=1.80
XnView xnview=1.80.1
XnView xnview=1.80.2
XnView xnview=1.80.3
XnView xnview=1.82
XnView xnview=1.82.2
XnView xnview=1.82.3
XnView xnview=1.82.4
XnView xnview=1.90
XnView xnview=1.90.1
XnView xnview=1.90.3
XnView xnview=1.91
XnView xnview=1.91.1
XnView xnview=1.91.2
XnView xnview=1.91.3
XnView xnview=1.91.4
XnView xnview=1.91.5
XnView xnview=1.91.6
XnView xnview=1.92
XnView xnview=1.92.1
XnView xnview=1.93
XnView xnview=1.93.1
XnView xnview=1.93.2
XnView xnview=1.93.3
XnView xnview=1.93.4
XnView xnview=1.93.6
XnView xnview=1.94
XnView xnview=1.94.1
XnView xnview=1.94.2
XnView xnview=1.95
XnView xnview=1.95.1
XnView xnview=1.95.2
XnView xnview=1.95.3
XnView xnview=1.95.4
XnView xnview=1.96
XnView xnview=1.96.1
XnView xnview=1.96.2
XnView xnview=1.96.5
XnView xnview=1.97
XnView xnview=1.97.1
XnView xnview=1.97.2
XnView xnview=1.97.3
XnView xnview=1.97.4
XnView xnview=1.97.5
XnView xnview=1.97.6
XnView xnview=1.97.7
XnView xnview=1.97.8
XnView xnview=1.98
XnView xnview=1.98.1
XnView xnview=1.98.2
XnView xnview=1.98.3
XnView xnview=1.98.4
XnView xnview=1.98.5
XnView xnview=1.98.6
XnView xnview=1.98.7
XnView xnview=1.98.8
XnView xnview=1.99
XnView xnview=1.99.1
Remediation
Patch Available
Event History
Aug 9, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2577?
CVE-2013-2577 has a high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2013-2577?
To fix CVE-2013-2577, upgrade your XnView software to version 2.04 or later.
3
What affected software versions are vulnerable to CVE-2013-2577?
Versions of XnView prior to 2.04, including 1.0-a through 2.03, are vulnerable to CVE-2013-2577.
4
Is CVE-2013-2577 exploitable through a specific file type?
Yes, CVE-2013-2577 can be exploited via a crafted PCT file.
5
Who is impacted by CVE-2013-2577?
All users of vulnerable XnView versions prior to 2.04 are at risk of CVE-2013-2577.