Marsu

**Name of the Vulnerable Software and Affected Versions** IrfanView versions 4.00 and earlier **Description** A buffer overflow issue allows user-assisted remote attackers to execute arbitrary code via a crafted .IFF file. **Recommendations** For IrfanView versions 4.00 and earlier, update to a version later than 4.00 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: XnView versions 1.90.3 XnView versions prior to 1.70 Description: The issue is related to a stack-based buffer overflow that allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely. Recommendations: For XnView version 1.90.3, update to a version that fixes the stack-based buffer overflow issue. For XnView versions prior to 1.70, update to a version that fixes the stack-based buffer overflow issue. As a temporary workaround, consider avoiding the use of crafted XPM files with long section strings until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Photofiltre Studio version 8.1.1 **Description** A buffer overflow issue allows user-assisted remote attackers to execute arbitrary code via a crafted .tif file. **Recommendations** For Photofiltre Studio version 8.1.1, avoid opening untrusted .tif files until a patch is available. As a temporary workaround, consider disabling the handling of .tif files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** ACDSee version 9.0 Build 108 ACDSee Pro version 8.1 Build 99 ACDSee Photo Editor version 4.0 Build 195 **Description** A stack-based buffer overflow issue exists in the ID X.apl plugin, allowing user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. **Recommendations** For ACDSee version 9.0 Build 108, update to a version that fixes the issue in the ID X.apl plugin. For ACDSee Pro version 8.1 Build 99, update to a version that fixes the issue in the ID X.apl plugin. For ACDSee Photo Editor version 4.0 Build 195, update to a version that fixes the issue in the ID X.apl plugin.

**Name of the Vulnerable Software and Affected Versions** AccuSoft ImageGear versions 15.1.2.0 through 15.2.0.0 **Description** A buffer overflow issue in the igcore15d.dll library of AccuSoft ImageGear allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. **Recommendations** For AccuSoft ImageGear versions 15.1.2.0 through 15.2.0.0, consider avoiding the use of .CLP files from untrusted sources until a patch is available. As a temporary workaround, restrict access to the igcore15d.dll library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: IrfanView version 3.99 Description: A buffer overflow issue in IrfanView allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file. Recommendations: For IrfanView version 3.99, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** NewsBin Pro version 4.32 **Description** The issue is a stack-based buffer overflow that can be triggered by a yEnc (yEncode) encoded article with a long filename. This can be exploited using a .nzb file, potentially allowing remote attackers to cause a denial of service or execute arbitrary code. **Recommendations** For NewsBin Pro version 4.32, consider avoiding the use of yEnc encoded articles with long filenames until a patch is available. As a temporary workaround, restrict the handling of .nzb files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** DaanSystems NewsReactor version 20070220.21 **Description** The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a yEnc (yEncode) encoded article with a long filename. **Recommendations** For DaanSystems NewsReactor version 20070220.21, consider restricting the handling of yEnc encoded articles with long filenames until a patch is available. As a temporary workaround, limiting the length of filenames in yEnc encoded articles may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Explorer versions on Windows 2000 SP4 and XP SP2 **Description** The issue allows remote attackers to cause a denial of service, resulting in memory corruption and crash, via an Office file with crafted document summary information. This error occurs in Ole32.dll. **Recommendations** For Windows 2000 SP4 and XP SP2, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** FTP Voyager versions 14.0.0.3 and earlier **Description** A stack-based buffer overflow issue allows remote servers to cause a denial of service (crash) via a long response to a CWD command. This occurs when the user aborts the command, triggering the overflow. **Recommendations** For versions 14.0.0.3 and earlier, update to a version later than 14.0.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the CWD command to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** TurboFTP version 5.30 Build 572 **Description** The issue is related to multiple heap-based buffer overflows that can be triggered by remote servers, leading to a denial of service. This can occur through a long filename in response to a LIST command or a long response to a CWD command. **Recommendations** For TurboFTP version 5.30 Build 572, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FTP Explorer versions 1.0.1 Build 047 through 1.0.1.51 **Description** The issue allows remote servers to cause a denial of service, specifically CPU consumption, by sending a long response to a `PWD` command. **Recommendations** For versions 1.0.1 Build 047 through 1.0.1.51, update to version 1.0.1.52 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: NewsBin Pro versions 4.x through 5.33 Description: The issue allows user-assisted remote attackers to execute arbitrary code via multiple buffer overflows. This can be achieved by exploiting a long DataPath or DownloadPath attribute in an NBI file, or a long group field in an NZB file. Recommendations: For NewsBin Pro versions 4.x through 5.33, consider updating to a newer version that contains a fix for this issue, as using a long DataPath, DownloadPath, or group field in the respective files can lead to arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TurboFTP version 5.30 Build 572 Description: The issue allows remote servers to cause a denial of service, specifically CPU consumption, by sending a response that contains a large number of newline characters. Recommendations: For TurboFTP version 5.30 Build 572, consider restricting the handling of newline characters in server responses to prevent excessive CPU consumption until a patch is available.

Name of the Vulnerable Software and Affected Versions: News Rover version 12.1 Rev 1 Description: The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers. This can be achieved by using a .nzb file with a long group or subject string, allowing the execution of arbitrary code. Recommendations: For News Rover version 12.1 Rev 1, consider avoiding the use of .nzb files with long group or subject strings until a patch is available. As a temporary workaround, restrict the handling of .nzb files to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: FlashFXP version 3.4.0 build 1145 Description: The issue allows remote servers to cause a denial of service, specifically CPU consumption, by responding to a PWD command with a long string that contains a deeply nested directory structure. This could be related to a buffer overflow. Recommendations: For FlashFXP version 3.4.0 build 1145, consider restricting the use of the PWD command or limiting the response size from remote servers to minimize the risk of CPU consumption until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SmartFTP version 2.0.1002 **Description** A heap-based buffer overflow issue allows remote FTP servers to execute arbitrary code via a large banner. **Recommendations** For SmartFTP version 2.0.1002, update to a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Texas Imperial Software WFTPD and WFTPD Pro Server versions 3.25 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending a long SITE ADMIN command. Recommendations: For Texas Imperial Software WFTPD and WFTPD Pro Server versions 3.25 and earlier, as a temporary workaround, consider restricting access to the SITE ADMIN command until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Dream FTP Server (affected versions not specified) Description: A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers. This triggers the overflow during the processing of the Server Log. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.