CVE-2013-2577
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 12%
from disclosure to weapon0 days
Published on NVDAug 9
1st PoCJul 23
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27049cve_referencewww.exploit-db.com/exploits/27049unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/bugtraq/2013-07/0153.htmlhttp://newsgroup.xnview.com/viewtopic.php?f=35&t=28400http://osvdb.org/95580http://secunia.com/advisories/54174https://exchange.xforce.ibmcloud.com/vulnerabilities/85919http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerabilityhttp://www.exploit-db.com/exploits/27049http://www.securitytracker.com/id/1028817