Xnsoft · Xnsoft Nconvert · CVE-2024-22532
Name of the Vulnerable Software and Affected Versions:
XNSoft NConvert version 7.163
Description:
The issue is related to a Buffer Overflow in the heap, allowing remote attackers to cause a denial of service via a crafted xwd file. This can be exploited by sending a specially crafted file, leading to a denial of service.
Recommendations:
For XNSoft NConvert version 7.163, consider disabling the handling of xwd files until a patch is available to prevent potential exploitation. Avoid using the software to process untrusted or unknown xwd files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.