Stack-based Buffer Overflow in XnView by XnView
CVE-2013-3246

7.8HIGH

Key Information:

Vendor

Xnview

Status
Xnview
Vendor
CVE Published:
2 January 2020

What is CVE-2013-3246?

A stack-based buffer overflow vulnerability in XnView prior to version 2.03 could allow remote attackers to execute arbitrary code. This issue arises from improper handling of crafted image layers within XCF files, allowing an attacker to launch malicious payloads when the victim opens a specially devised image. Users of XnView should ensure they are using the latest version to mitigate this risk and protect their systems.

Affected Version(s)

XnView before 2.03

References

http://www.fuzzmyapp.com/advisories/FMA-2013-003/FMA-2013...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/84643
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.