Vulnerabilities (CVE)

Filtered by vendor Xnview Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28835 1 Xnview 1 Xnview 2023-08-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
CVE-2021-28427 1 Xnview 1 Xnview 2023-08-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
CVE-2019-13254 1 Xnview 1 Xnview 2021-07-21 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.
CVE-2019-13253 1 Xnview 1 Xnview 2021-07-21 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.
CVE-2019-13255 1 Xnview 1 Xnview 2021-07-21 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.
CVE-2019-13261 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.
CVE-2019-13256 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.
CVE-2019-13258 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.
CVE-2019-13259 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.
CVE-2019-13262 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.
CVE-2019-13257 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.
CVE-2019-13260 1 Xnview 1 Xnview 2020-08-24 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.
CVE-2013-3939 1 Xnview 1 Xnview 2020-01-15 6.8 MEDIUM 7.8 HIGH
xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow.
CVE-2013-3937 1 Xnview 1 Xnview 2020-01-08 6.8 MEDIUM 7.8 HIGH
Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.
CVE-2013-3246 1 Xnview 1 Xnview 2020-01-03 6.8 MEDIUM 7.8 HIGH
Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file.
CVE-2013-3247 1 Xnview 1 Xnview 2020-01-03 6.8 MEDIUM 7.8 HIGH
Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.
CVE-2019-17261 1 Xnview 1 Xnview 2019-10-10 4.6 MEDIUM 7.8 HIGH
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.
CVE-2019-17262 1 Xnview 1 Xnview 2019-10-10 4.6 MEDIUM 7.8 HIGH
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.
CVE-2019-13085 1 Xnview 1 Xnview 2019-07-03 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.
CVE-2019-13084 1 Xnview 1 Xnview 2019-07-03 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.
CVE-2019-13083 1 Xnview 1 Xnview 2019-07-03 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
CVE-2019-9967 2 Microsoft, Xnview 2 Windows, Xnview Classic 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString.
CVE-2019-9968 2 Microsoft, Xnview 2 Windows, Xnview Classic 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem.
CVE-2019-9969 2 Microsoft, Xnview 2 Windows, Xnview Classic 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x385399.
CVE-2019-9966 2 Microsoft, Xnview 2 Windows, Xnview Classic 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c.
CVE-2019-9964 2 Microsoft, Xnview 2 Windows, Xnview Mp 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey.
CVE-2019-9962 2 Microsoft, Xnview 2 Windows, Xnview Mp 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy.
CVE-2019-9963 2 Microsoft, Xnview 2 Windows, Xnview Mp 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap.
CVE-2019-9965 2 Microsoft, Xnview 2 Windows, Xnview Mp 2019-03-25 6.8 MEDIUM 7.8 HIGH
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap.
CVE-2018-15174 1 Xnview 1 Xnview 2018-10-04 6.8 MEDIUM 7.8 HIGH
XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash) or possibly have unspecified other impact via a crafted ICO file.
CVE-2018-15175 1 Xnview 1 Xnview 2018-10-04 6.8 MEDIUM 7.8 HIGH
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVariant+0x0000000000000014 and application crash) or possibly have unspecified other impact via a crafted RLE file.
CVE-2018-15176 1 Xnview 1 Xnview 2018-10-04 6.8 MEDIUM 7.8 HIGH
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash) or possibly have unspecified other impact via a crafted RLE file.
CVE-2017-15802 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000087."
CVE-2017-15801 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77310000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."
CVE-2017-15803 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is mishandled during an attempt to render the DLL icon, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77310000!LdrpResCompareResourceNames+0x0000000000000150."
CVE-2017-15772 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d."
CVE-2017-15774 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."
CVE-2017-15773 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."
CVE-2017-15776 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."
CVE-2017-15777 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."
CVE-2017-15778 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."
CVE-2017-15780 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."
CVE-2017-15779 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0."
CVE-2017-15781 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."
CVE-2017-15782 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000032eb."
CVE-2017-15785 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79."
CVE-2017-15784 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal Instruction Violation starting at xnview+0x0000000000370074."
CVE-2017-15786 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."
CVE-2017-15789 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."
CVE-2017-15788 2 Microsoft, Xnview 2 Windows, Xnview 2017-10-24 6.8 MEDIUM 7.8 HIGH
XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x0000000000002d83."