CVEvulnerability
CVE-2013-2577
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.
Affected configurations
• xnview xnview (<= 2.03)
• xnview xnview 1.0
• xnview xnview 1.01
• xnview xnview 1.02
• xnview xnview 1.03
• xnview xnview 1.04
• xnview xnview 1.05
• xnview xnview 1.06
• xnview xnview 1.07
• xnview xnview 1.08
• xnview xnview 1.09
• xnview xnview 1.10
• xnview xnview 1.11
• xnview xnview 1.12
• xnview xnview 1.13
• xnview xnview 1.14
• xnview xnview 1.15
• xnview xnview 1.16
• xnview xnview 1.17
• xnview xnview 1.18
• xnview xnview 1.18.1
• xnview xnview 1.19
• xnview xnview 1.20
• xnview xnview 1.21
• xnview xnview 1.22
• xnview xnview 1.23
• xnview xnview 1.24
• xnview xnview 1.25
• xnview xnview 1.30
• xnview xnview 1.31
• xnview xnview 1.32
• xnview xnview 1.33
• xnview xnview 1.34
• xnview xnview 1.35
• xnview xnview 1.36
• xnview xnview 1.37
• xnview xnview 1.40
• xnview xnview 1.41
• xnview xnview 1.45
• xnview xnview 1.46
• xnview xnview 1.50
• xnview xnview 1.50.1
• xnview xnview 1.55
• xnview xnview 1.60
• xnview xnview 1.61
• xnview xnview 1.65
• xnview xnview 1.66
• xnview xnview 1.67
• xnview xnview 1.68
• xnview xnview 1.68.1
• xnview xnview 1.70
• xnview xnview 1.70.2
• xnview xnview 1.70.3
• xnview xnview 1.70.4
• xnview xnview 1.74
• xnview xnview 1.80
• xnview xnview 1.80.1
• xnview xnview 1.80.2
• xnview xnview 1.80.3
• xnview xnview 1.82
… and 53 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0153.html Exploit
- http://newsgroup.xnview.com/viewtopic.php?f=35&t=28400 Patch
- http://osvdb.org/95580 osvdb.org
- http://secunia.com/advisories/54174 Vendor Advisory
- http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Exploit
- http://www.exploit-db.com/exploits/27049 Exploit
- http://www.securitytracker.com/id/1028817 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85919 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0153.html Exploit
- http://newsgroup.xnview.com/viewtopic.php?f=35&t=28400 Patch
- http://osvdb.org/95580 osvdb.org
- http://secunia.com/advisories/54174 Vendor Advisory
- http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Exploit
- http://www.exploit-db.com/exploits/27049 Exploit
- http://www.securitytracker.com/id/1028817 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85919 exchange.xforce.ibmcloud.com