CVE-2012-0684

Description

Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0685.

Risk Information

Base Score
8.4
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.392

Associated Vulnerability

VulnerabilityOS Platform
update xnview 1.98.4 to latest versionWindows
update xnview 1.98.4 to latest version (For Ubuntu)Linux
update xnview 1.98.4 to latest version (For Debian)Linux
update xnview 1.98.4 to latest version (For Centos)Linux
update xnview 1.98.4 to latest version (For RedHat)Linux
update xnview 1.98.4 to latest version (For Suse)Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234