XnView TIFF image processing Multiple Remote Heap Buffer Overflow Vulnerabilities

Release date: 2012-09-09
Updated on:

Affected Systems:
XnView 1.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55482

XnView is a browser Image Viewer that supports multiple graphic formats.

XnView 1.98, 1.99, and other versions handle JPEG-compressed TIFF images with errors. The special "ImageLength" and "ImageWidth" header values can cause heap buffer overflow.

<* Source: FuzzMyApp

Link: http://secunia.com/advisories/50547/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

XnView
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.xnview.com/