CVE-2012-0282

XnView <1.99 - Buffer Overflow

Title source: llm

Description

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Francis Provencher · textdoswindows

https://www.exploit-db.com/exploits/19335

View Code ZIP pw:eip

References (5)

[Various Sources] http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858

[Vendor Advisory] http://secunia.com/advisories/48666

[Exploit] http://www.exploit-db.com/exploits/19335

[Third Party Advisory, VDB Entry] http://www.osvdb.org/83086

[Various Sources] http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=51

Scores

EPSS 0.1125

EPSS Percentile 93.4%

Classification

CWE

CWE-119

Status draft

Affected Products (1)

xnview/xnview < 1.98.8

Timeline

Published Jul 17, 2012

Tracked Since Feb 18, 2026