Xnview CVE-2017-9529

HIGH

Buffer Overflow (CWE-119)

2017-07-05 cve@mitre.org

Buffer Overflow Microsoft Xnview

7.8

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Jul 05, 2017 - 20:29 cve.org

HIGH 7.8

DescriptionCVE.org

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."

AnalysisAI

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd.". Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd." Affected products include: Xnview. Version information: Version 2.40.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Xnview

View all

CVE-2012-4988 CRITICAL Emergency POC

Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99

CVE-2013-2577 CRITICAL Act Now POC

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Rated cr

CVE-2012-0276 MEDIUM This Month POC

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

CVE-2012-0282 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2012-0277 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2019-13262 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb. Rated high severity (CVSS 7.8), this

CVE-2019-13261 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384. Rated high severity (CVSS 7.8), this

CVE-2019-13260 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07. Rated high severity (CVSS 7.8), this

CVE-2019-13259 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566. Rated high severity (CVSS 7.8), this

CVE-2019-13258 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165. Rated high severity (CVSS 7.8), this

CVE-2019-13257 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa. Rated high severity (CVSS 7.8), this

CVE-2019-13256 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849. Rated high severity (CVSS 7.8), this

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2023-4966 CRITICAL POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

CVE-2017-6736 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2017-11882 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2017-9529 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy