KLA10404 ACE vulnerability in XnView

An integer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JXR file.

Original advisories

Related products

XnView

CVE list

CVE-2013-3938 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• XnView version 2.13