CVE-2020-23886

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

CVE-2020-23886

creationtimestamp| type| source ---|---|--- 2021-11-11 00:36:47+00:00| seen| https://t.me/cibsecurity/32208...

CVE-2020-23886

XnView MP 0.96.4 is affected by a heap overflow in the image-pict processing path, enabling denial of service. Exploit path is a crafted pict file, with the fault linked to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Public documents do not specify a patched version; Red Hat/other...