XnSoft Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with XnSoft products.
Products
- XnConvert1 vulnerability
- XnView Classic1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-25328MEDIUM | XnConvert 1.82 - Denial of ServiceXnConvert 1.82 contains a denial of service vulnerability in its registration code input field that allows attackers to crash the application. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the registration code field to trigger an application crash. CWE-121Feb 12, 2026 | CVSS6.7v4.0 | EPSS0.314% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-11950HIGH | XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution VulnerabilityXnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RWZ files. The issue results from the lack of proper validation of user-supplied data, which can result … CWE-191Dec 11, 2024 | CVSS8.8v3.1 | EPSS0.494% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |