Summary
This host has XnView installed and is prone to multiple heap based buffer overflow vulnerabilities.
Vulnerabilities Insight:
The flaws are due to
- A signedness error in the FlashPix plugin (Xfpx.dll) when validating buffer sizes to process image's content.
- An error when processing image data within Personal Computer eXchange (PCX) files.
- A boundary error when parsing a directory, which allows attackers to cause a buffer overflow when browsing folder from an extracted archive file.
Impact
Successful exploitation will allow attackers to execute arbitrary code on the system via a specially crafted files or cause a denial of service condition.
Impact Level: System/Application
Solution
Update to XnView version 1.98.8 or later,
For updates refer to http://www.xnview.com/
Affected
XnView versions 1.98.5 and prior on windows
References
