Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

175 records

TI-2024-11087 CVE-2024-11950 · GHSA-x37p-5rxc-rc3h

Integer underflow in XnSoft XnView Classic

Priority MEDIUM 41

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00488 Published 2024-12-11 No fix listed CWE-191
TI-2013-02835 CVE-2013-3246 · GHSA-h9m8-w9xg-7744

Out-of-bounds write in XnView

Priority LOW 39

Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02401 Published 2020-01-02 Fixed in 2.03 CWE-787
TI-2013-02836 CVE-2013-3247 · GHSA-3w4x-wq52-ff93

Out-of-bounds write in XnView

Priority LOW 39

Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02401 Published 2020-01-02 Fixed in 2.03 CWE-787
TI-2013-03439 CVE-2013-3937 · GHSA-94xj-69g8-cmj9

Out-of-bounds write in XnView

Priority LOW 38

Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01745 Published 2020-01-02 Fixed in 2.13 CWE-787
TI-2013-03441 CVE-2013-3939 · GHSA-wfq4-7r76-pfcq

Out-of-bounds write in XnView

Priority LOW 38

xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01726 Published 2020-01-02 Fixed in 2.13 CWE-787
TI-2013-03443 CVE-2013-3941 · GHSA-prf9-fwxw-pw78

Out-of-bounds write in XnView

Priority MEDIUM 47

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a craft…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02757 Published 2020-01-02 Fixed in 2.13 CWE-787
Load more