CVE-2012-0276

CVE-2012-0276 describes multiple heap-based buffer overflows in XnView versions prior to 1.99. These vulnerabilities allow remote attackers to trigger a denial of service (application crash) and potentially execute arbitrary code by crafting malicious SGI32LogLum compressed TIFF images. With a CVSS score of 6.8, this vulnerability is moderately severe, requiring user interaction (e.g., opening a malicious file) but potentially leading to confidentiality, integrity, and availability impacts. While not listed on CISA's KEV catalog, public exploit code exists on ExploitDB, indicating a potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.