PT-2019-19963 · Xnview · Xnview Mp

Code16 · Publicado 2019-03-24 · Atualizado 2019-03-25 · CVE-2019-9965

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XnView MP version 0.93.1

Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted file. This is related to the ntdll!RtlReAllocateHeap function.

Recommendations For XnView MP version 0.93.1, consider avoiding the use of crafted files that may trigger the denial of service or other unspecified impacts until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2019-9965

Produtos afetados

Xnview Mp

Referências · 3

• https://code610.blogspot.com/2019/03/crashing-xnview-248.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-9965 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9965 · Aviso do Fabricante