Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1461. PoCs published by Sylvain THUAL.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in XnView 1.92.1 by passing a malicious filename as a command-line argument. It uses a shellcode to execute arbitrary code (calc.exe) and leverages a return address from user32.dll to redirect execution.
Description
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.
Exploits (1)
This exploit targets a buffer overflow vulnerability in XnView 1.92.1 by passing a malicious filename as a command-line argument. It uses a shellcode to execute arbitrary code (calc.exe) and leverages a return address from user32.dll to redirect execution.