PT-2023-12129
CVE-2021-28835
·
تاريخ النشر
2023-08-11
·
تاريخ التحديث
2023-08-17
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
XNView versions prior to 2.50
Description
The issue allows local attackers to execute arbitrary code via crafted GEM bitmap files. This is a Buffer Overflow vulnerability.
Recommendations
For versions prior to 2.50, update to version 2.50 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted GEM bitmap files until a patch is applied. Restrict access to the GEM bitmap file handling functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾