CVE-2023-43251

Published: Oct 19, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

Affected (1)

Products: Xnview: Nconvert

Xnview

1 product

Nconvert

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xnview Nconvert	Version 7.136

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (8)

http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2023/Oct/15

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

https://github.com/mrtouch93/exploits/tree/main/NConvert7.136/SEH

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.xnview.com/en/nconvert/

Source: cve@mitre.org

Product

http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2023/Oct/15

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

https://github.com/mrtouch93/exploits/tree/main/NConvert7.136/SEH

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.xnview.com/en/nconvert/

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.