KLA10403 ACE vulnerability in XnView

A buffer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PCT file.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

XnView

CVE list

CVE-2013-2577 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• XnView versions 2.03 and earlier