CVE-2013-3938

XnView 2.13 is affected by a heap-based buffer overflow in the JXR file handling path. The vulnerability stems from an integer/NUM_ELEMENTS issue in an IFD_ENTRY structure processed by xnview.exe, which can lead to remote code execution. Affected product/version: XnView 2.13; vulnerable component...