• info
• discussion
• exploit
• solution
• references

XnView PSD Image Multiple Integer Overflow Vulnerabilities

XnView is prone to multiple integer-overflow vulnerabilities because it fails to properly validate user-supplied input.

Successful exploits may allow attackers to execute arbitrary code in the context of applications that use the affected library. Failed exploit attempts will likely result in denial-of-service conditions.

XnView 1.98.2 and prior versions are vulnerable.