Design/Logic Flaw

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33...

CVE-2020-23887

XnView MP v0.96.4 is affected by a heap-based buffer overflow that can be triggered by a crafted ICO file, leading to a denial of service. The issue is described as a Read Access Violation beginning at USER32!SmartStretchDIBits+0x33. Connected sources confirm the vulnerability in XnView MP, but d...

CVE-2020-23886

XnView MP 0.96.4 is affected by a heap overflow in the image-pict processing path, enabling denial of service. Exploit path is a crafted pict file, with the fault linked to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Public documents do not specify a patched version; Red Hat/other...