PT-2012-2459
CVE-2012-0282
·
Publicado
2012-07-17
·
Atualizado
2012-07-18
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
XnView versions prior to 1.99
Description
The issue is related to a heap-based buffer overflow that can be triggered by a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image. This can cause a denial of service, leading to an application crash, and potentially allow the execution of arbitrary code.
Recommendations
For versions prior to 1.99, update to version 1.99 or later to resolve the issue. As a temporary workaround, consider avoiding the use of GIF images with crafted ImageLeftPosition values in the ImageDescriptor structure until the update is applied.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾