CVE-2013-3937

2020-01-0219:11:47

flexera

www.cve.org

8.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

JSON

Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.

CNA Affected

[
  {
    "product": "XnView",
    "vendor": "XnView",
    "versions": [
      {
        "status": "affected",
        "version": "before 2.13"
      }
    ]
  }
]