Arbitrary Code Execution via Integer Overflow in XnViewer

Arbitrary Code Execution via Integer Overflow in XnViewer

CVE-2012-0685 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684.

Learn more about our Web Application Penetration Testing UK.