Xnview CVE-2013-2577

CRITICAL

Buffer Overflow (CWE-119)

2013-08-09 cve@mitre.org

Buffer Overflow RCE Xnview

9.3

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

M

Confidentiality

C

Integrity

C

Availability

C

Lifecycle Timeline

1

CVE Published

Aug 09, 2013 - 21:55 cve.org

CRITICAL 9.3

DescriptionCVE.org

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

AnalysisAI

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 31.8%.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Affected products include: Xnview. Version information: before 2.04.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Xnview

View all

CVE-2012-4988 CRITICAL Emergency POC

Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99

CVE-2012-0276 MEDIUM This Month POC

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

CVE-2012-0282 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2012-0277 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2019-13262 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb. Rated high severity (CVSS 7.8), this

CVE-2019-13261 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384. Rated high severity (CVSS 7.8), this

CVE-2019-13260 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07. Rated high severity (CVSS 7.8), this

CVE-2019-13259 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566. Rated high severity (CVSS 7.8), this

CVE-2019-13258 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165. Rated high severity (CVSS 7.8), this

CVE-2019-13257 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa. Rated high severity (CVSS 7.8), this

CVE-2019-13256 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849. Rated high severity (CVSS 7.8), this

CVE-2019-13255 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464. Rated high severity (CVSS 7.8), this

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2023-4966 CRITICAL POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

CVE-2017-6736 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2017-11882 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2013-2577 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy