Summary
This host has XnView installed and is prone to integer overflow vulnerability.
Vulnerabilities Insight:
The flaw is due to integer overflow when processing DICOM images with certain dimensions. This can be exploited to cause a heap-based buffer overflow by persuading a victim to open a specially-crafted DICOM image file.
Impact
Attackers can exploit this issue to cause buffer overflow and execute arbitrary code on the system with elevated privileges or cause the application to crash.
Impact Level: System/Application
Solution
Update to XnView version 1.97.2
For updates refer to http://www.xnview.com/
Affected
XnView versions prior to 1.97.2 on windows
References
Severity
Classification
-
CVE CVE-2009-4001 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Reader Multimeda Doc.media.newPlayer Code Execution Vulnerability (Linux)
- Adobe Acrobat and Reader SING 'uniqueName' Buffer Overflow Vulnerability (Win)
- Adobe Reader 'Plug-in' Buffer Overflow Vulnerability (Linux)
- Apple Safari 'CSS' Buffer Overflow Vulnerability (Win) - Dec09
- Apple iTunes 'itms:' URI Stack Buffer Overflow Vulnerability