Buffer Overflow vulnerability in XNSoft Nconvert Image Processing Tool
CVE-2023-43250

7.8HIGH

Key Information:

Vendor

Xnview

Status
Nconvert
Vendor
CVE Published:
18 October 2023

What is CVE-2023-43250?

The XNSoft Nconvert version 7.136 is susceptible to a buffer overflow vulnerability that can be exploited through a specially crafted image file. An attacker may leverage this flaw to trigger a User Mode Write Access Violation (AV), potentially leading to Denial of Service (DoS) conditions or even enabling code execution. Users of Nconvert should take precautions against this vulnerability to safeguard their applications from possible exploitation.

References

https://github.com/mrtouch93/exploits/tree/main/NConvert7...
https://www.xnview.com/en/nconvert/
http://packetstormsecurity.com/files/175145/XNSoft-Nconve...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.