Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
XnView 缓冲区错误漏洞
Vulnerability Description
XnView是法国软件开发者Gougelet Pierre-Emmanuel所研发的一套多平台图片查看软件。该软件可用于查看、转换、组织和编辑图形及视频文件。 XnView 2.13之前版本中存在缓冲区错误漏洞，该漏洞源于程序未正确对用户提供的输入进行边界检查，导致程序复制数据的大小超出了分配的内存缓冲区空间。攻击者可利用该漏洞在应用程序上下文中执行任意代码，也可能造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A