CVE-2012-0282

Description

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.

Risk Information

Base Score
7.8
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
11.251

Associated Vulnerability

VulnerabilityOS Platform
update xnview 1.98.8 to latest versionWindows
update xnview 1.98.8 to latest version (For Ubuntu)Linux
update xnview 1.98.8 to latest version (For Debian)Linux
update xnview 1.98.8 to latest version (For Centos)Linux
update xnview 1.98.8 to latest version (For RedHat)Linux
update xnview 1.98.8 to latest version (For Suse)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234