CVE-2013-2577

XnView < 2.04 - Remote Code Execution via Crafted PCT File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-2577. PoCs published by Core Security.

AI-analyzed exploit summary This advisory describes a buffer overflow vulnerability in XnView v2.03 when processing PCT files, allowing remote code execution via a crafted file. The provided PoC demonstrates a crash with controlled EIP overwritten to 0x41424344.

Description

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Core Security · textdoswindows

https://www.exploit-db.com/exploits/27049

View Code ZIP pw:eip

This advisory describes a buffer overflow vulnerability in XnView v2.03 when processing PCT files, allowing remote code execution via a crafted file. The provided PoC demonstrates a crash with controlled EIP overwritten to 0x41424344.

Classification

Writeup 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: XnView v2.03

No auth needed

Prerequisites: User interaction to open a malicious PCT file

MITRE ATT&CK