CVE-2012-0276

XnView < 1.99 - Heap-Based Buffer Overflow via SGI32LogLum Compressed TIFF Image

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2012-0276. PoCs published by Francis Provencher.

AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in XnView when processing maliciously crafted TIFF images with SGI32LogLum compression. The provided TIFF file triggers the vulnerability, leading to potential remote code execution.

Description

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Francis Provencher · textdoswindows
https://www.exploit-db.com/exploits/19338

This exploit targets a heap-based buffer overflow in XnView when processing maliciously crafted TIFF images with SGI32LogLum compression. The provided TIFF file triggers the vulnerability, leading to potential remote code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: XnView 1.98.8
No auth needed
Prerequisites: Victim must open the malicious TIFF file in XnView
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Francis Provencher · textdoswindows
https://www.exploit-db.com/exploits/19337

This is a writeup describing a heap-based buffer overflow vulnerability in XnView when processing malformed TIFF images with SGI32LogLum compression and LogL PhotometricInterpretation. The exploit details are provided, but no actual exploit code is included in the text.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: XnView 1.98.8
No auth needed
Prerequisites: A malformed TIFF file with specific compression and PhotometricInterpretation settings
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Various Sources x_refsource_confirm
http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48666
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/19338
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/19337

Scores

EPSS 0.0832
EPSS Percentile 94.2%

Details

CWE
CWE-119
Status published
Products (1)
xnview/xnview < 1.98.8
Published Jul 17, 2012
Tracked Since Feb 18, 2026