Xnview CVE-2013-2577

CRITICAL

Buffer Overflow (CWE-119)

2013-08-09 cve@mitre.org

RCE Buffer Overflow Xnview

9.3

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

M

Confidentiality

C

Integrity

C

Availability

C

Lifecycle Timeline

1

CVE Published

Aug 09, 2013 - 21:55 cve.org

CRITICAL 9.3

DescriptionCVE.org

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

AnalysisAI

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 31.8%.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Affected products include: Xnview. Version information: before 2.04.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Xnview

View all

CVE-2012-4988 CRITICAL Emergency POC

Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99

CVE-2012-0276 MEDIUM This Month POC

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

CVE-2023-52174 CRITICAL Act Now POC

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6. Rated critical severity (CV

CVE-2012-0282 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2012-0277 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2023-43251 HIGH This Week POC

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Rated high severity (CVSS 7.8),

CVE-2023-43252 HIGH This Week POC

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file. Rated high severity (CVSS 7.8), this vu

CVE-2023-43250 HIGH This Week POC

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authent

CVE-2019-13262 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb. Rated high severity (CVSS 7.8), this

CVE-2019-13261 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384. Rated high severity (CVSS 7.8), this

CVE-2019-13260 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07. Rated high severity (CVSS 7.8), this

CVE-2019-13259 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566. Rated high severity (CVSS 7.8), this

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2020-0796 CRITICAL POC

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2023-4966 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Share

CVE-2013-2577 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy