Summary
This host has XnView installed and is prone to integer overflow vulnerability.
Vulnerabilities Insight:
The flaw is due to integer overflow when processing DICOM images with certain dimensions. This can be exploited to cause a heap-based buffer overflow by persuading a victim to open a specially-crafted DICOM image file.
Impact
Attackers can exploit this issue to cause buffer overflow and execute arbitrary code on the system with elevated privileges or cause the application to crash.
Impact Level: System/Application
Solution
Update to XnView version 1.97.2
For updates refer to http://www.xnview.com/
Affected
XnView versions prior to 1.97.2 on linux
References
Severity
Classification
-
CVE CVE-2009-4001 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- ActiveFax RAW Server Multiple Buffer Overflow Vulnerabilities
- Apple iTunes '.pls' Files Buffer Overflow Vulnerability
- Cscope Multiple Buffer Overflow vulnerability
- Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities (Mac OS X)
- Adobe Reader 'XFDF' File Buffer Overflow Vulnerability (Linux)