Read the docs
TI-2013-02281 Aliases CVE-2013-2577GHSA-mvvw-4387-6v7x

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

Priority MEDIUM 54CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

Why it matters now

EPSS 0.11797 96th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 117

CPEVersionsRoleVendor
cpe:2.3:a:xnview:xnview:*:*:*:*:*:*:*:*up to 2.03VulnerableXnView
cpe:2.3:a:xnview:xnview:1.0:a:*:*:*:*:*:*1.0 aVulnerableXnView
cpe:2.3:a:xnview:xnview:1.01:*:*:*:*:*:*:*1.01VulnerableXnView
cpe:2.3:a:xnview:xnview:1.02:*:*:*:*:*:*:*1.02VulnerableXnView
cpe:2.3:a:xnview:xnview:1.03:*:*:*:*:*:*:*1.03VulnerableXnView
cpe:2.3:a:xnview:xnview:1.04:*:*:*:*:*:*:*1.04VulnerableXnView
cpe:2.3:a:xnview:xnview:1.05:*:*:*:*:*:*:*1.05VulnerableXnView
cpe:2.3:a:xnview:xnview:1.05:b:*:*:*:*:*:*1.05 bVulnerableXnView
cpe:2.3:a:xnview:xnview:1.05:c:*:*:*:*:*:*1.05 cVulnerableXnView
cpe:2.3:a:xnview:xnview:1.06:*:*:*:*:*:*:*1.06VulnerableXnView
  • cpe:2.3:a:xnview:xnview:*:*:*:*:*:*:*:* Versions up to 2.03 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.0:a:*:*:*:*:*:* Versions 1.0 a Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.05:b:*:*:*:*:*:* Versions 1.05 b Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.05:c:*:*:*:*:*:* Versions 1.05 c Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.06:*:*:*:*:*:*:* Versions 1.06 Vulnerable ·XnView
Show 107 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:xnview:xnview:1.07:*:*:*:*:*:*:*1.07VulnerableXnView
cpe:2.3:a:xnview:xnview:1.08:*:*:*:*:*:*:*1.08VulnerableXnView
cpe:2.3:a:xnview:xnview:1.09:*:*:*:*:*:*:*1.09VulnerableXnView
cpe:2.3:a:xnview:xnview:1.10:*:*:*:*:*:*:*1.10VulnerableXnView
cpe:2.3:a:xnview:xnview:1.11:*:*:*:*:*:*:*1.11VulnerableXnView
cpe:2.3:a:xnview:xnview:1.12:*:*:*:*:*:*:*1.12VulnerableXnView
cpe:2.3:a:xnview:xnview:1.13:*:*:*:*:*:*:*1.13VulnerableXnView
cpe:2.3:a:xnview:xnview:1.14:*:*:*:*:*:*:*1.14VulnerableXnView
cpe:2.3:a:xnview:xnview:1.15:*:*:*:*:*:*:*1.15VulnerableXnView
cpe:2.3:a:xnview:xnview:1.16:*:*:*:*:*:*:*1.16VulnerableXnView
cpe:2.3:a:xnview:xnview:1.17:*:*:*:*:*:*:*1.17VulnerableXnView
cpe:2.3:a:xnview:xnview:1.17:a:*:*:*:*:*:*1.17 aVulnerableXnView
cpe:2.3:a:xnview:xnview:1.18:*:*:*:*:*:*:*1.18VulnerableXnView
cpe:2.3:a:xnview:xnview:1.18.1:*:*:*:*:*:*:*1.18.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.19:*:*:*:*:*:*:*1.19VulnerableXnView
cpe:2.3:a:xnview:xnview:1.20:*:*:*:*:*:*:*1.20VulnerableXnView
cpe:2.3:a:xnview:xnview:1.21:*:*:*:*:*:*:*1.21VulnerableXnView
cpe:2.3:a:xnview:xnview:1.22:*:*:*:*:*:*:*1.22VulnerableXnView
cpe:2.3:a:xnview:xnview:1.23:*:*:*:*:*:*:*1.23VulnerableXnView
cpe:2.3:a:xnview:xnview:1.24:*:*:*:*:*:*:*1.24VulnerableXnView
cpe:2.3:a:xnview:xnview:1.25:*:*:*:*:*:*:*1.25VulnerableXnView
cpe:2.3:a:xnview:xnview:1.25:a:*:*:*:*:*:*1.25 aVulnerableXnView
cpe:2.3:a:xnview:xnview:1.30:*:*:*:*:*:*:*1.30VulnerableXnView
cpe:2.3:a:xnview:xnview:1.31:*:*:*:*:*:*:*1.31VulnerableXnView
cpe:2.3:a:xnview:xnview:1.32:*:*:*:*:*:*:*1.32VulnerableXnView
cpe:2.3:a:xnview:xnview:1.33:*:*:*:*:*:*:*1.33VulnerableXnView
cpe:2.3:a:xnview:xnview:1.34:*:*:*:*:*:*:*1.34VulnerableXnView
cpe:2.3:a:xnview:xnview:1.35:*:*:*:*:*:*:*1.35VulnerableXnView
cpe:2.3:a:xnview:xnview:1.36:*:*:*:*:*:*:*1.36VulnerableXnView
cpe:2.3:a:xnview:xnview:1.37:*:*:*:*:*:*:*1.37VulnerableXnView
cpe:2.3:a:xnview:xnview:1.40:*:*:*:*:*:*:*1.40VulnerableXnView
cpe:2.3:a:xnview:xnview:1.41:*:*:*:*:*:*:*1.41VulnerableXnView
cpe:2.3:a:xnview:xnview:1.45:*:*:*:*:*:*:*1.45VulnerableXnView
cpe:2.3:a:xnview:xnview:1.46:*:*:*:*:*:*:*1.46VulnerableXnView
cpe:2.3:a:xnview:xnview:1.50:*:*:*:*:*:*:*1.50VulnerableXnView
cpe:2.3:a:xnview:xnview:1.50.1:*:*:*:*:*:*:*1.50.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.55:*:*:*:*:*:*:*1.55VulnerableXnView
cpe:2.3:a:xnview:xnview:1.60:*:*:*:*:*:*:*1.60VulnerableXnView
cpe:2.3:a:xnview:xnview:1.61:*:*:*:*:*:*:*1.61VulnerableXnView
cpe:2.3:a:xnview:xnview:1.65:*:*:*:*:*:*:*1.65VulnerableXnView
cpe:2.3:a:xnview:xnview:1.66:*:*:*:*:*:*:*1.66VulnerableXnView
cpe:2.3:a:xnview:xnview:1.67:*:*:*:*:*:*:*1.67VulnerableXnView
cpe:2.3:a:xnview:xnview:1.68:*:*:*:*:*:*:*1.68VulnerableXnView
cpe:2.3:a:xnview:xnview:1.68.1:*:*:*:*:*:*:*1.68.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.70:*:*:*:*:*:*:*1.70VulnerableXnView
cpe:2.3:a:xnview:xnview:1.70.2:*:*:*:*:*:*:*1.70.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.70.3:*:*:*:*:*:*:*1.70.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.70.4:*:*:*:*:*:*:*1.70.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.74:*:*:*:*:*:*:*1.74VulnerableXnView
cpe:2.3:a:xnview:xnview:1.80:*:*:*:*:*:*:*1.80VulnerableXnView
cpe:2.3:a:xnview:xnview:1.80.1:*:*:*:*:*:*:*1.80.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.80.2:*:*:*:*:*:*:*1.80.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.80.3:*:*:*:*:*:*:*1.80.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.82:*:*:*:*:*:*:*1.82VulnerableXnView
cpe:2.3:a:xnview:xnview:1.82.2:*:*:*:*:*:*:*1.82.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.82.3:*:*:*:*:*:*:*1.82.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.82.4:*:*:*:*:*:*:*1.82.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.90:*:*:*:*:*:*:*1.90VulnerableXnView
cpe:2.3:a:xnview:xnview:1.90.1:*:*:*:*:*:*:*1.90.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.90.3:*:*:*:*:*:*:*1.90.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91:*:*:*:*:*:*:*1.91VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91.1:*:*:*:*:*:*:*1.91.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91.2:*:*:*:*:*:*:*1.91.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91.3:*:*:*:*:*:*:*1.91.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91.4:*:*:*:*:*:*:*1.91.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91.5:*:*:*:*:*:*:*1.91.5VulnerableXnView
cpe:2.3:a:xnview:xnview:1.91.6:*:*:*:*:*:*:*1.91.6VulnerableXnView
cpe:2.3:a:xnview:xnview:1.92:*:*:*:*:*:*:*1.92VulnerableXnView
cpe:2.3:a:xnview:xnview:1.92.1:*:*:*:*:*:*:*1.92.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.93:*:*:*:*:*:*:*1.93VulnerableXnView
cpe:2.3:a:xnview:xnview:1.93.1:*:*:*:*:*:*:*1.93.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.93.2:*:*:*:*:*:*:*1.93.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.93.3:*:*:*:*:*:*:*1.93.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.93.4:*:*:*:*:*:*:*1.93.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.93.6:*:*:*:*:*:*:*1.93.6VulnerableXnView
cpe:2.3:a:xnview:xnview:1.94:*:*:*:*:*:*:*1.94VulnerableXnView
cpe:2.3:a:xnview:xnview:1.94.1:*:*:*:*:*:*:*1.94.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.94.2:*:*:*:*:*:*:*1.94.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.95:*:*:*:*:*:*:*1.95VulnerableXnView
cpe:2.3:a:xnview:xnview:1.95.1:*:*:*:*:*:*:*1.95.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.95.2:*:*:*:*:*:*:*1.95.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.95.3:*:*:*:*:*:*:*1.95.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.95.4:*:*:*:*:*:*:*1.95.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.96:*:*:*:*:*:*:*1.96VulnerableXnView
cpe:2.3:a:xnview:xnview:1.96.1:*:*:*:*:*:*:*1.96.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.96.2:*:*:*:*:*:*:*1.96.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.96.5:*:*:*:*:*:*:*1.96.5VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97:*:*:*:*:*:*:*1.97VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.1:*:*:*:*:*:*:*1.97.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.2:*:*:*:*:*:*:*1.97.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.3:*:*:*:*:*:*:*1.97.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.4:*:*:*:*:*:*:*1.97.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.5:*:*:*:*:*:*:*1.97.5VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.6:*:*:*:*:*:*:*1.97.6VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.7:*:*:*:*:*:*:*1.97.7VulnerableXnView
cpe:2.3:a:xnview:xnview:1.97.8:*:*:*:*:*:*:*1.97.8VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98:*:*:*:*:*:*:*1.98VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.1:*:*:*:*:*:*:*1.98.1VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.2:*:*:*:*:*:*:*1.98.2VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.3:*:*:*:*:*:*:*1.98.3VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.4:*:*:*:*:*:*:*1.98.4VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.5:*:*:*:*:*:*:*1.98.5VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.6:*:*:*:*:*:*:*1.98.6VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.7:*:*:*:*:*:*:*1.98.7VulnerableXnView
cpe:2.3:a:xnview:xnview:1.98.8:*:*:*:*:*:*:*1.98.8VulnerableXnView
cpe:2.3:a:xnview:xnview:1.99:*:*:*:*:*:*:*1.99VulnerableXnView
cpe:2.3:a:xnview:xnview:1.99.1:*:*:*:*:*:*:*1.99.1VulnerableXnView
  • cpe:2.3:a:xnview:xnview:1.07:*:*:*:*:*:*:* Versions 1.07 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.08:*:*:*:*:*:*:* Versions 1.08 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.09:*:*:*:*:*:*:* Versions 1.09 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.10:*:*:*:*:*:*:* Versions 1.10 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.14:*:*:*:*:*:*:* Versions 1.14 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.15:*:*:*:*:*:*:* Versions 1.15 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.16:*:*:*:*:*:*:* Versions 1.16 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.17:*:*:*:*:*:*:* Versions 1.17 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.17:a:*:*:*:*:*:* Versions 1.17 a Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.18:*:*:*:*:*:*:* Versions 1.18 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.18.1:*:*:*:*:*:*:* Versions 1.18.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.19:*:*:*:*:*:*:* Versions 1.19 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.20:*:*:*:*:*:*:* Versions 1.20 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.21:*:*:*:*:*:*:* Versions 1.21 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.22:*:*:*:*:*:*:* Versions 1.22 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.23:*:*:*:*:*:*:* Versions 1.23 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.24:*:*:*:*:*:*:* Versions 1.24 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.25:*:*:*:*:*:*:* Versions 1.25 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.25:a:*:*:*:*:*:* Versions 1.25 a Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.30:*:*:*:*:*:*:* Versions 1.30 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.31:*:*:*:*:*:*:* Versions 1.31 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.32:*:*:*:*:*:*:* Versions 1.32 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.33:*:*:*:*:*:*:* Versions 1.33 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.34:*:*:*:*:*:*:* Versions 1.34 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.35:*:*:*:*:*:*:* Versions 1.35 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.36:*:*:*:*:*:*:* Versions 1.36 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.37:*:*:*:*:*:*:* Versions 1.37 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.40:*:*:*:*:*:*:* Versions 1.40 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.41:*:*:*:*:*:*:* Versions 1.41 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.45:*:*:*:*:*:*:* Versions 1.45 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.46:*:*:*:*:*:*:* Versions 1.46 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.50:*:*:*:*:*:*:* Versions 1.50 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.50.1:*:*:*:*:*:*:* Versions 1.50.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.55:*:*:*:*:*:*:* Versions 1.55 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.60:*:*:*:*:*:*:* Versions 1.60 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.61:*:*:*:*:*:*:* Versions 1.61 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.65:*:*:*:*:*:*:* Versions 1.65 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.66:*:*:*:*:*:*:* Versions 1.66 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.67:*:*:*:*:*:*:* Versions 1.67 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.68:*:*:*:*:*:*:* Versions 1.68 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.68.1:*:*:*:*:*:*:* Versions 1.68.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.70:*:*:*:*:*:*:* Versions 1.70 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.70.2:*:*:*:*:*:*:* Versions 1.70.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.70.3:*:*:*:*:*:*:* Versions 1.70.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.70.4:*:*:*:*:*:*:* Versions 1.70.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.74:*:*:*:*:*:*:* Versions 1.74 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.80:*:*:*:*:*:*:* Versions 1.80 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.80.1:*:*:*:*:*:*:* Versions 1.80.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.80.2:*:*:*:*:*:*:* Versions 1.80.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.80.3:*:*:*:*:*:*:* Versions 1.80.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.82:*:*:*:*:*:*:* Versions 1.82 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.82.2:*:*:*:*:*:*:* Versions 1.82.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.82.3:*:*:*:*:*:*:* Versions 1.82.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.82.4:*:*:*:*:*:*:* Versions 1.82.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.90:*:*:*:*:*:*:* Versions 1.90 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.90.1:*:*:*:*:*:*:* Versions 1.90.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.90.3:*:*:*:*:*:*:* Versions 1.90.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91:*:*:*:*:*:*:* Versions 1.91 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91.1:*:*:*:*:*:*:* Versions 1.91.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91.2:*:*:*:*:*:*:* Versions 1.91.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91.3:*:*:*:*:*:*:* Versions 1.91.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91.4:*:*:*:*:*:*:* Versions 1.91.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91.5:*:*:*:*:*:*:* Versions 1.91.5 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.91.6:*:*:*:*:*:*:* Versions 1.91.6 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.92:*:*:*:*:*:*:* Versions 1.92 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.92.1:*:*:*:*:*:*:* Versions 1.92.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.93:*:*:*:*:*:*:* Versions 1.93 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.93.1:*:*:*:*:*:*:* Versions 1.93.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.93.2:*:*:*:*:*:*:* Versions 1.93.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.93.3:*:*:*:*:*:*:* Versions 1.93.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.93.4:*:*:*:*:*:*:* Versions 1.93.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.93.6:*:*:*:*:*:*:* Versions 1.93.6 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.94:*:*:*:*:*:*:* Versions 1.94 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.94.1:*:*:*:*:*:*:* Versions 1.94.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.94.2:*:*:*:*:*:*:* Versions 1.94.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.95:*:*:*:*:*:*:* Versions 1.95 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.95.1:*:*:*:*:*:*:* Versions 1.95.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.95.2:*:*:*:*:*:*:* Versions 1.95.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.95.3:*:*:*:*:*:*:* Versions 1.95.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.95.4:*:*:*:*:*:*:* Versions 1.95.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.96:*:*:*:*:*:*:* Versions 1.96 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.96.1:*:*:*:*:*:*:* Versions 1.96.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.96.2:*:*:*:*:*:*:* Versions 1.96.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.96.5:*:*:*:*:*:*:* Versions 1.96.5 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97:*:*:*:*:*:*:* Versions 1.97 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.1:*:*:*:*:*:*:* Versions 1.97.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.2:*:*:*:*:*:*:* Versions 1.97.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.3:*:*:*:*:*:*:* Versions 1.97.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.4:*:*:*:*:*:*:* Versions 1.97.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.5:*:*:*:*:*:*:* Versions 1.97.5 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.6:*:*:*:*:*:*:* Versions 1.97.6 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.7:*:*:*:*:*:*:* Versions 1.97.7 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.97.8:*:*:*:*:*:*:* Versions 1.97.8 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98:*:*:*:*:*:*:* Versions 1.98 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.1:*:*:*:*:*:*:* Versions 1.98.1 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.2:*:*:*:*:*:*:* Versions 1.98.2 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.3:*:*:*:*:*:*:* Versions 1.98.3 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.4:*:*:*:*:*:*:* Versions 1.98.4 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.5:*:*:*:*:*:*:* Versions 1.98.5 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.6:*:*:*:*:*:*:* Versions 1.98.6 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.7:*:*:*:*:*:*:* Versions 1.98.7 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.98.8:*:*:*:*:*:*:* Versions 1.98.8 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.99:*:*:*:*:*:*:* Versions 1.99 Vulnerable ·XnView
  • cpe:2.3:a:xnview:xnview:1.99.1:*:*:*:*:*:*:* Versions 1.99.1 Vulnerable ·XnView

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-2577
  2. 2026-10-03 Alias added: GHSA-mvvw-4387-6v7x

References

Exploit 3

Patch 1

Other 1

  • TI-2010-01850 Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers… CVSS 2.0HIGH 9.3
  • TI-2012-04214 Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format… CVSS 2.0HIGH 9.3
  • TI-2009-03793 Integer overflow in XnView before 1.97.2 might allow remote attackers to execute… CVSS 2.0HIGH 9.3
  • TI-2013-03443 Out-of-bounds write in XnView CVSS 3.1CRITICAL 9.8
  • TI-2008-01398 Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute… CVSS 2.0HIGH 7.6
  • TI-2013-03440 Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute… CVSS 2.0HIGH 9.3
See all 155 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences