Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

xnview: buffer overflow

Package(s):

xnview

CVE #(s):

CVE-2007-2194

Created:

July 12, 2007

Updated:

July 18, 2007

Description:

The XnView image processing utility is vulnerable to a stack-based buffer overflow due to improper handling of XPM image files. If an attacker can trick a user into viewing a specially crafted image file, it may be possible to execute code with the privileges of the user.

Alerts:

Gentoo

200707-06

2007-07-11

(Log in to post comments)