Xnview CVE-2017-9901

HIGH

Buffer Overflow (CWE-119)

2017-07-05 cve@mitre.org

Buffer Overflow Microsoft Xnview

7.8

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Jul 05, 2017 - 20:29 cve.org

HIGH 7.8

DescriptionCVE.org

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5."

AnalysisAI

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at Xfpx!gffGetFormatInfo+0x000000000002bfd5." Affected products include: Xnview. Version information: Version 2.40.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Xnview

View all

CVE-2012-4988 CRITICAL Emergency POC

Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99

CVE-2013-2577 CRITICAL Act Now POC

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Rated cr

CVE-2012-0276 MEDIUM This Month POC

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat

CVE-2023-52174 CRITICAL Act Now POC

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6. Rated critical severity (CV

CVE-2012-0282 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2012-0277 MEDIUM This Month POC

Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash

CVE-2023-43251 HIGH This Week POC

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Rated high severity (CVSS 7.8),

CVE-2023-43252 HIGH This Week POC

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file. Rated high severity (CVSS 7.8), this vu

CVE-2023-43250 HIGH This Week POC

XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authent

CVE-2019-13262 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb. Rated high severity (CVSS 7.8), this

CVE-2019-13261 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384. Rated high severity (CVSS 7.8), this

CVE-2019-13260 HIGH This Week POC

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07. Rated high severity (CVSS 7.8), this

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2020-0796 CRITICAL POC

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2023-4966 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2020-0796 CRITICAL POC

CVE-2019-11043 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

Share

CVE-2017-9901 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy