CVE-2008-0069 Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than....
MediumCVSS 6.8
EPSS 8.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pierreegougelet xnview | <= 1.92 | No fix listed |
| pierreegougelet xnview | <= 1.92.1 | No fix listed |
References
- 29620 patch third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 28579 vdb-entry
- ADV-2008-1044 vdb-entry
- xnview-slideshow-bo(41542) vdb-entry
- 5346 exploit