Description
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Core Security · textdoswindows
https://www.exploit-db.com/exploits/27049
References (8)
Core 8
Core References
Patch x_refsource_confirm
http://newsgroup.xnview.com/viewtopic.php?f=35&t=28400
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/85919
Exploit x_refsource_misc
http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1028817
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/27049
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/95580
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-07/0153.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/54174
Scores
EPSS
0.3179
EPSS Percentile
96.8%
Details
CWE
CWE-119
Status
published
Products (46)
xnview/xnview
1.0 a
xnview/xnview
1.01
xnview/xnview
1.02
xnview/xnview
1.03
xnview/xnview
1.04
xnview/xnview
1.05 (3 CPE variants)
xnview/xnview
1.06
xnview/xnview
1.07
xnview/xnview
1.08
xnview/xnview
1.09
... and 36 more
Published
Aug 09, 2013
Tracked Since
Feb 18, 2026