XnSoft NConvert Stack Buffer Overrun Vulnerability

A stack buffer overrun vulnerability has been identified in XnSoft NConvert version 7.230. This vulnerability can be exploited by using a crafted .tiff file, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a stack buffer overrun, which can disrupt the normal operation of the application and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by using the command line option '-out tiff' with a crafted .tiff file named 'id_000003_00'. This command will trigger the stack buffer overrun while processing the file.