CVE-2013-2577

UnknownEPSS 11.84%

Last modified

CVE-2013-2577 is a vulnerability of currently unknown severity. Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.. EPSS estimates a 11.84% chance of exploitation in the next 30 days.

Description

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

Metrics

EPSS Probability
11.84%

95.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
XnviewXnview<= 2.03
XnviewXnview1.0A
XnviewXnview1.01
XnviewXnview1.02
XnviewXnview1.03
XnviewXnview1.04
XnviewXnview1.05
XnviewXnview1.06
XnviewXnview1.07
XnviewXnview1.08
XnviewXnview1.09
XnviewXnview1.10
XnviewXnview1.11
XnviewXnview1.12
XnviewXnview1.13
XnviewXnview1.14
XnviewXnview1.15
XnviewXnview1.16
XnviewXnview1.17
XnviewXnview1.18
XnviewXnview1.18.1
XnviewXnview1.19
XnviewXnview1.20
XnviewXnview1.21
XnviewXnview1.22
XnviewXnview1.23
XnviewXnview1.24
XnviewXnview1.25
XnviewXnview1.30
XnviewXnview1.31
XnviewXnview1.32
XnviewXnview1.33
XnviewXnview1.34
XnviewXnview1.35
XnviewXnview1.36
XnviewXnview1.37
XnviewXnview1.40
XnviewXnview1.41
XnviewXnview1.45
XnviewXnview1.46
XnviewXnview1.50
XnviewXnview1.50.1
XnviewXnview1.55
XnviewXnview1.60
XnviewXnview1.61
XnviewXnview1.65
XnviewXnview1.66
XnviewXnview1.67
XnviewXnview1.68
XnviewXnview1.68.1

Showing 50 of 113 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-2577?
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.
How severe is CVE-2013-2577?
Severity scoring for CVE-2013-2577 is pending analysis. The EPSS model estimates a 11.84% probability of exploitation in the next 30 days.
How do I fix CVE-2013-2577?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-2577?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST