CVE:CVE-2013-2577
CNNVD:CNNVD-201308-138
XnView是法国软件开发者Gougelet Pierre-Emmanuel所研发的一套多平台图片查看软件。该软件可用于查看、转换、组织和编辑图形及视频文件。
XnView 2.03及之前的版本中存在缓冲区溢出漏洞。远程攻击者可通过特制的PCT文件利用该漏洞执行任意代码。
solution:Upgrade xnview xnview to a higher version than 2.03,1.0:a,1.01,1.02,1.03,1.04,1.05,1.05:b,1.05:c,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.13,1.14,1.15,1.16,1.17,1.17:a,1.18,1.18.1,1.19,1.20,1.21,1.22,1.23,1.24,1.25,1.25:a,1.30,1.31,1.32,1.33,1.34,1.35,1.36,1.37,1.40,1.41,1.45,1.46,1.50,1.50.1,1.55,1.60,1.61,1.65,1.66,1.67,1.68,1.68.1,1.70,1.70.2,1.70.3,1.70.4,1.74,1.80,1.80.1,1.80.2,1.80.3,1.82,1.82.2,1.82.3,1.82.4,1.90,1.90.1,1.90.3,1.91,1.91.1,1.91.2,1.91.3,1.91.4,1.91.5,1.91.6,1.92,1.92.1,1.93,1.93.1,1.93.2,1.93.3,1.93.4,1.93.6,1.94,1.94.1,1.94.2,1.95,1.95.1,1.95.2,1.95.3,1.95.4,1.96,1.96.1,1.96.2,1.96.5,1.97,1.97.1,1.97.2,1.97.3,1.97.4,1.97.5,1.97.6,1.97.7,1.97.8,1.98,1.98.1,1.98.2,1.98.3,1.98.4,1.98.5,1.98.6,1.98.7,1.98.8,1.99,1.99.1,and avoid the version (,2.03],1.0:a,1.01,1.02,1.03,1.04,1.05,1.05:b,1.05:c,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.13,1.14,1.15,1.16,1.17,1.17:a,1.18,1.18.1,1.19,1.20,1.21,1.22,1.23,1.24,1.25,1.25:a,1.30,1.31,1.32,1.33,1.34,1.35,1.36,1.37,1.40,1.41,1.45,1.46,1.50,1.50.1,1.55,1.60,1.61,1.65,1.66,1.67,1.68,1.68.1,1.70,1.70.2,1.70.3,1.70.4,1.74,1.80,1.80.1,1.80.2,1.80.3,1.82,1.82.2,1.82.3,1.82.4,1.90,1.90.1,1.90.3,1.91,1.91.1,1.91.2,1.91.3,1.91.4,1.91.5,1.91.6,1.92,1.92.1,1.93,1.93.1,1.93.2,1.93.3,1.93.4,1.93.6,1.94,1.94.1,1.94.2,1.95,1.95.1,1.95.2,1.95.3,1.95.4,1.96,1.96.1,1.96.2,1.96.5,1.97,1.97.1,1.97.2,1.97.3,1.97.4,1.97.5,1.97.6,1.97.7,1.97.8,1.98,1.98.1,1.98.2,1.98.3,1.98.4,1.98.5,1.98.6,1.98.7,1.98.8,1.99,1.99.1