Xnview

Xnview

156 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-11950

  • EPSS 0.26%
  • Published 12.12.2024 01:40:21
  • Last modified 15.08.2025 18:31:26

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exp...

7.8

CVE-2023-46587

  • EPSS 0.04%
  • Published 27.10.2023 23:15:07
  • Last modified 21.11.2024 08:28:50

Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.

7.8

CVE-2021-28427

  • EPSS 0.05%
  • Published 11.08.2023 14:15:12
  • Last modified 21.11.2024 05:59:39

Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.

7.8

CVE-2021-28835

  • EPSS 0.03%
  • Published 11.08.2023 14:15:12
  • Last modified 21.11.2024 06:00:18

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.

9.8

CVE-2013-3492

  • EPSS 0.44%
  • Published 27.01.2020 15:15:11
  • Last modified 21.11.2024 01:53:44

XnView 2.03 has a stack-based buffer overflow vulnerability

9.8

CVE-2013-3493

  • EPSS 0.41%
  • Published 27.01.2020 15:15:11
  • Last modified 21.11.2024 01:53:44

XnView 2.03 has an integer overflow vulnerability

7.8

CVE-2013-3939

  • EPSS 1.01%
  • Published 02.01.2020 20:15:14
  • Last modified 21.11.2024 01:54:34

xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extensio...

9.8

CVE-2013-3941

  • EPSS 5.32%
  • Published 02.01.2020 20:15:14
  • Last modified 21.11.2024 01:54:34

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads ...

7.8

CVE-2013-3937

  • EPSS 1.16%
  • Published 02.01.2020 20:15:13
  • Last modified 21.11.2024 01:54:34

Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.

7.8

CVE-2013-3247

Exploit
  • EPSS 1.2%
  • Published 02.01.2020 20:15:12
  • Last modified 21.11.2024 01:53:16

Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.