CVE-2013-3939

XnView vulnerability CVE-2013-3939: Multiple connected sources confirm a heap-based buffer overflow in XnView’s RGB handling, caused by improper processing of RLE strip lengths. The issue exists in xnview.exe prior to version 2.13 (and cited variants reference older versions, e.g., 2.04), enablin...

XnView 2.x < 2.13 Multiple Buffer Overflows

The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...