CVE-2019-9967

HIGH

XnView Classic 2.48 - Denial of Service via Crafted File

Title source: llm

Description

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://code610.blogspot.com/2019/03/crashing-xnview-248.html

Scores

CVSS v3 7.8

EPSS 0.0028

EPSS Percentile 51.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (1)

xnview/xnview_classic 2.48

Published Mar 24, 2019

Tracked Since Feb 18, 2026