Buffer Overflow Vulnerability in XNSoft Nconvert Software
CVE-2023-43252

7.8HIGH

Key Information:

Vendor

Xnview

Status
Nconvert
Vendor
CVE Published:
19 October 2023

What is CVE-2023-43252?

XNSoft Nconvert 7.136 has been identified as vulnerable to a buffer overflow that can be triggered by processing a specially crafted image file. This vulnerability could allow an attacker to disrupt the normal operations of the software, potentially leading to denial of service. Users of Nconvert should exercise caution and consider updating to the latest version to mitigate any risks associated with this issue.

References

https://www.xnview.com/en/nconvert/
https://github.com/mrtouch93/exploits/tree/main/NConvert7...
http://packetstormsecurity.com/files/175145/XNSoft-Nconve...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.