CVE-2013-3247

CVE-2013-3247 is a heap-based buffer overflow in XnView (xnview.exe) prior to 2.03. It can be triggered by a crafted RLE-compressed layer in an XCF file, allowing remote code execution on the affected host. Remediation: upgrade to XnView 2.03 or later (as specified). Exploit details beyond the de...

CVE-2013-3937

CVE-2013-3937 is a heap-based buffer overflow in XnView's xnview.exe prior to 2.13 that allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Affected product: XnView (Windows). Root cause: inadequate bounds checking when processing BMP data. Impact: arbitrary ...

CVE-2013-3937

Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file...

CVE-2013-3939

xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow...

CVE-2013-3939

XnView vulnerability CVE-2013-3939: Multiple connected sources confirm a heap-based buffer overflow in XnView’s RGB handling, caused by improper processing of RLE strip lengths. The issue exists in xnview.exe prior to version 2.13 (and cited variants reference older versions, e.g., 2.04), enablin...

CVE-2013-3941

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...

CVE-2013-3941

CVE-2013-3941 affects XnView before 2.13. The vulnerability is in Xjp2.dll (JPEG2000 handling): (1) Csiz parameter in a SIZ marker triggers incorrect memory allocation, and (2) lqcd field in a QCD marker causes a heap-based buffer overflow. This can enable remote code execution. Remediation: upgr...

XnView 2.49.1 - Research Denial of Service (PoC)

XnView 2.49.1 - Research Denial of Service PoC Exploit Title: XnView 2.49.1 - 'Research' Denial of Service PoC Exploit Author : ZwX Exploit Date: 2019-12-17 Vendor Homepage : http://www.xnview.com Link Software : https://www.xnview.com/fr/xnview/downloads Tested on OS: Windows 7 ''' Proof of...

XnView 2.49.1 Denial Of Service

Exploit Title: XnView 2.49.1 - 'Research' Denial of Service PoC Exploit Author : ZwX Exploit Date: 2019-12-17 Vendor Homepage : http://www.xnview.com Link Software : https://www.xnview.com/fr/xnview/downloads Tested on OS: Windows 7 ''' Proof of Concept PoC: ======================= 1.Download and...

XnView 2.49.1 - (Research) Denial of Service Exploit

Exploit Title: XnView 2.49.1 - 'Research' Denial of Service PoC Exploit Author : ZwX Vendor Homepage : http://www.xnview.com Link Software : https://www.xnview.com/fr/xnview/downloads Tested on OS: Windows 7 ''' Proof of Concept PoC: ======================= 1.Download and install XnView 2.Open th...

XnView 2.49.1 - 'Research' Denial of Service (PoC)

Exploit Title: XnView 2.49.1 - 'Research' Denial of Service PoC Exploit Author : ZwX Exploit Date: 2019-12-17 Vendor Homepage : http://www.xnview.com Link Software : https://www.xnview.com/fr/xnview/downloads Tested on OS: Windows 7 ''' Proof of Concept PoC: ======================= 1.Download and...

Memory Corruption Vulnerability in XnView

XnView from France is an image viewer with features such as image viewer, screen capture, slideshow, thumbnail maker, batch conversion, hexadecimal viewer, drag and drop, address book, scan input and more. XnView suffers from a memory corruption vulnerability that can be exploited by an attacker ...

Memory corruption vulnerability in XnView ldf files

XnView from France is a great image viewer with image viewer, screen capture, slideshow, thumbnail maker, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 image formats, and more than 500 images after installing plug-ins. XnView l...

Memory Corruption Vulnerability in XnView

XnView is a multi-platform software that supports image viewing, conversion and editing. A memory corruption vulnerability exists in XnView, which can be exploited by attackers to execute malicious code on a user's system or cause a denial of service...

Memory corruption vulnerability in XnView jpm files

XnView is a multi-platform software that supports image viewing, conversion and editing. A memory corruption vulnerability exists in XnView's handling of jpm files, which can be exploited by attackers to execute malicious code on a user's system or cause a denial of service...

Memory Corruption Vulnerability in Xnview

XnView from France is a great image viewer with image viewer, screen capture, slideshow, thumbnail maker, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 image formats, and more than 500 images after installing plug-ins. Xnview h...

Memory corruption vulnerability in XnView ldf files

XnView is an image viewer. A memory corruption vulnerability exists in XnView's handling of ldf files. An attacker can trick a user who installs XnView into opening a malicious ldf file, which in turn triggers the vulnerability and causes the program to deny service...

Memory Corruption Vulnerability in XnView

XnView Picture Viewer with picture viewer, screen capture, slideshow, thumbnail creation, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 picture formats and more than 500 pictures after installing plug-ins. XnView has a...

XnView suffers from a denial of service vulnerability ( CNVD-2019-41049)

XnView is an image viewer with image viewer, screen capture, slideshow, thumbnail creation, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 image formats and more than 500 images after installing the plug-in. XnView has a...

Denial of Service Vulnerability in XnView

XnView is an image viewer with image viewer, screen capture, slideshow, thumbnail creation, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 image formats and more than 500 images after installing the plug-in. XnView has a...