9.3

CVE-2009-4001

Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xnview ≫ Xnview Version <= 1.97.1
Xnview ≫ Xnview Version1.0 Updatea
Xnview ≫ Xnview Version1.01
Xnview ≫ Xnview Version1.02
Xnview ≫ Xnview Version1.03
Xnview ≫ Xnview Version1.04
Xnview ≫ Xnview Version1.05
Xnview ≫ Xnview Version1.05 Updateb
Xnview ≫ Xnview Version1.05 Updatec
Xnview ≫ Xnview Version1.06
Xnview ≫ Xnview Version1.07
Xnview ≫ Xnview Version1.08
Xnview ≫ Xnview Version1.09
Xnview ≫ Xnview Version1.10
Xnview ≫ Xnview Version1.11
Xnview ≫ Xnview Version1.12
Xnview ≫ Xnview Version1.13
Xnview ≫ Xnview Version1.14
Xnview ≫ Xnview Version1.15
Xnview ≫ Xnview Version1.16
Xnview ≫ Xnview Version1.17
Xnview ≫ Xnview Version1.17 Updatea
Xnview ≫ Xnview Version1.18
Xnview ≫ Xnview Version1.18.1
Xnview ≫ Xnview Version1.19
Xnview ≫ Xnview Version1.20
Xnview ≫ Xnview Version1.21
Xnview ≫ Xnview Version1.22
Xnview ≫ Xnview Version1.23
Xnview ≫ Xnview Version1.24
Xnview ≫ Xnview Version1.25
Xnview ≫ Xnview Version1.25 Updatea
Xnview ≫ Xnview Version1.30
Xnview ≫ Xnview Version1.31
Xnview ≫ Xnview Version1.32
Xnview ≫ Xnview Version1.33
Xnview ≫ Xnview Version1.34
Xnview ≫ Xnview Version1.35
Xnview ≫ Xnview Version1.36
Xnview ≫ Xnview Version1.37
Xnview ≫ Xnview Version1.40
Xnview ≫ Xnview Version1.41
Xnview ≫ Xnview Version1.45
Xnview ≫ Xnview Version1.46
Xnview ≫ Xnview Version1.50
Xnview ≫ Xnview Version1.50.1
Xnview ≫ Xnview Version1.55
Xnview ≫ Xnview Version1.60
Xnview ≫ Xnview Version1.61
Xnview ≫ Xnview Version1.65
Xnview ≫ Xnview Version1.66
Xnview ≫ Xnview Version1.67
Xnview ≫ Xnview Version1.68
Xnview ≫ Xnview Version1.68.1
Xnview ≫ Xnview Version1.70
Xnview ≫ Xnview Version1.70.2
Xnview ≫ Xnview Version1.70.3
Xnview ≫ Xnview Version1.70.4
Xnview ≫ Xnview Version1.74
Xnview ≫ Xnview Version1.80
Xnview ≫ Xnview Version1.80.1
Xnview ≫ Xnview Version1.80.2
Xnview ≫ Xnview Version1.80.3
Xnview ≫ Xnview Version1.82
Xnview ≫ Xnview Version1.82.2
Xnview ≫ Xnview Version1.82.3
Xnview ≫ Xnview Version1.82.4
Xnview ≫ Xnview Version1.90
Xnview ≫ Xnview Version1.90.1
Xnview ≫ Xnview Version1.90.3
Xnview ≫ Xnview Version1.91
Xnview ≫ Xnview Version1.91.1
Xnview ≫ Xnview Version1.91.2
Xnview ≫ Xnview Version1.91.3
Xnview ≫ Xnview Version1.91.4
Xnview ≫ Xnview Version1.91.5
Xnview ≫ Xnview Version1.91.6
Xnview ≫ Xnview Version1.92
Xnview ≫ Xnview Version1.92.1
Xnview ≫ Xnview Version1.93
Xnview ≫ Xnview Version1.93.1
Xnview ≫ Xnview Version1.93.2
Xnview ≫ Xnview Version1.93.3
Xnview ≫ Xnview Version1.93.4
Xnview ≫ Xnview Version1.93.6
Xnview ≫ Xnview Version1.94
Xnview ≫ Xnview Version1.94.1
Xnview ≫ Xnview Version1.94.2
Xnview ≫ Xnview Version1.95
Xnview ≫ Xnview Version1.95.1
Xnview ≫ Xnview Version1.95.2
Xnview ≫ Xnview Version1.95.3
Xnview ≫ Xnview Version1.95.4
Xnview ≫ Xnview Version1.96
Xnview ≫ Xnview Version1.96.1
Xnview ≫ Xnview Version1.96.2
Xnview ≫ Xnview Version1.96.5
Xnview ≫ Xnview Version1.97
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.61% 0.905
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://newsgroup.xnview.com/viewtopic.php?f=35&t=19469
Patch
http://secunia.com/secunia_research/2009-60/
http://www.osvdb.org/62829
http://www.securityfocus.com/archive/1/509999/100/0/threaded
http://www.securityfocus.com/bid/38629
https://exchange.xforce.ibmcloud.com/vulnerabilities/56802