PT-2012-2459

CVE-2012-0282

·

Published

2012-07-17

·

Updated

2012-07-18

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions XnView versions prior to 1.99
Description The issue is related to a heap-based buffer overflow that can be triggered by a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image. This can cause a denial of service, leading to an application crash, and potentially allow the execution of arbitrary code.
Recommendations For versions prior to 1.99, update to version 1.99 or later to resolve the issue. As a temporary workaround, consider avoiding the use of GIF images with crafted ImageLeftPosition values in the ImageDescriptor structure until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2012-0282
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com