CVE-2013-3941

creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:11+00:00| seen| https://t.me/cibsecurity/8964 2020-01-08 22:32:33+00:00| seen| https://t.me/cibsecurity/9048...

CVE-2013-3941

CVE-2013-3941 affects XnView before 2.13. The vulnerability is in Xjp2.dll (JPEG2000 handling): (1) Csiz parameter in a SIZ marker triggers incorrect memory allocation, and (2) lqcd field in a QCD marker causes a heap-based buffer overflow. This can enable remote code execution. Remediation: upgr...

XnView 2.x < 2.13 Multiple Buffer Overflows

The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...