CVE-2013-3937

CVE-2013-3937 is a heap-based buffer overflow in XnView's xnview.exe prior to 2.13 that allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Affected product: XnView (Windows). Root cause: inadequate bounds checking when processing BMP data. Impact: arbitrary ...

PT-2020-7469

Name of the Vulnerable Software and Affected Versions: XnView versions prior to 2.13 Description: The issue is related to a heap-based buffer overflow in the xnview.exe component of XnView. This occurs when processing the biBitCount field in a BMP file, allowing remote attackers to execute...

PT-2017-12821

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description The issue is related to the bmp read info header function, which does not properly handle headers with a zero biBitCount, leading to a denial of service due to memory allocation failure in the opj image creat...

CVE-2017-12982: Improper Restriction of Operations within the Bounds of a Memory Buffer

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...

CVE-2013-3928

Stack-based buffer overflow in the ReadFile function in fltBMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file...