Lucene search
HistoryJul 09, 2014 - 2:55 p.m.
CVE-2012-4988
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.144
Percentile
95.8%
Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file.
Affected configurations
Node
xnviewxnviewMatch1.99
ORxnviewxnviewMatch1.99.1
Related
exploitpack
exploitpack
XnView 1.99.1 - .JLS File Decompression Heap Overflow
2012-10-04 00:00:00
securityvulns
securityvulns
XnView JLS File Decompression Heap Overflow
2012-10-05 00:00:00
XnView buffer overflow
2012-10-05 00:00:00
seebug
seebug
XnView 1.99.1 JLS File Decompression Heap Overflow
2014-07-01 00:00:00
openvas
openvas
XnView JPEG-LS Image Processing Buffer Overflow Vulnerability
2014-08-26 00:00:00
cvelist
cvelist
CVE-2012-4988
2014-07-09 14:00:00
cve
cve
CVE-2012-4988
2014-07-09 14:55:03
prion
prion
Heap overflow
2014-07-09 14:55:00
exploitdb
exploitdb
XnView 1.99.1 - '.JLS' File Decompression Heap Overflow
2012-10-04 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.144
Percentile
95.8%
Related for NVD:CVE-2012-4988