---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: XnView / NConvert Radiance RGBE Buffer Overflow SECUNIA ADVISORY ID: SA28326 VERIFY ADVISORY: http://secunia.com/advisories/28326/ CRITICAL: Highly critical IMPACT: System access WHERE: >From remote SOFTWARE: XnView 1.x http://secunia.com/product/6705/ NConvert 4.x http://secunia.com/product/17378/ DESCRIPTION: Secunia Research has discovered a vulnerability in XnView and NConvert, which can be exploited by malicious people to compromise a user's system. The vulnerability is cause due to a boundary error when reading Radiance RGBE (*.hdr) files. This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into viewing a specially crafted Radiance RGBE file. Successful exploitation allows execution of arbitrary code. The vulnerability is confirmed in XnView versions 1.91 and 1.92 and NConvert version 4.85. Other versions may also be affected. SOLUTION: Update to XnView version 1.92.1 and NConvert 4.86. XnView: http://pagesperso-orange.fr/pierre.g/xnview/endownload.html NConvert: http://pagesperso-orange.fr/pierre.g/xnview/en_ncdownload.html PROVIDED AND/OR DISCOVERED BY: Stefan Cornelius, Secunia Research. ORIGINAL ADVISORY: Secunia Research: http://secunia.com/secunia_research/2008-1/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------