Heap-based Buffer Overflow Vulnerability in XnView by XnView
CVE-2013-3247

7.8HIGH

Key Information:

Vendor

Xnview

Status
Xnview
Vendor
CVE Published:
2 January 2020

What is CVE-2013-3247?

A heap-based buffer overflow vulnerability exists in XnView versions prior to 2.03. This flaw allows remote attackers to exploit the application by sending a specially crafted RLE compressed layer within an XCF file, potentially leading to the execution of arbitrary code on the user's system. This issue highlights the importance of keeping software updated to protect against such exploits.

Affected Version(s)

XnView before 2.03

References

http://www.fuzzmyapp.com/advisories/FMA-2013-003/FMA-2013...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/84642
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.