Xnview vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-52174 XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.Critical 9.8 · Dec 28, 2023
• CVE-2023-52173 XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.Critical 9.8 · Dec 28, 2023
• CVE-2023-46587 Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.High 7.8 · Oct 27, 2023
• CVE-2023-43251 XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file.High 7.8 · Oct 19, 2023
• CVE-2023-43252 XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file.High 7.8 · Oct 19, 2023
• CVE-2023-43250 XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow.High 7.8 · Oct 18, 2023
• CVE-2021-28835 Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.High 7.8 · Aug 11, 2023
• CVE-2021-28427 Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.High 7.8 · Aug 11, 2023
• CVE-2013-3493 XnView 2.03 has an integer overflowCritical 9.8 · Jan 27, 2020
• CVE-2013-3492 XnView 2.03 has a stack-based buffer overflowCritical 9.8 · Jan 27, 2020
• CVE-2013-3941 Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory Critical 9.8 · Jan 2, 2020
• CVE-2013-3939 xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary cHigh 7.8 · Jan 2, 2020
• CVE-2013-3937 Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.High 7.8 · Jan 2, 2020
• CVE-2013-3247 Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF fiHigh 7.8 · Jan 2, 2020
• CVE-2013-3246 Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file.High 7.8 · Jan 2, 2020
• CVE-2019-17262 XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.High 7.8 · Oct 8, 2019
• CVE-2019-17261 XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.High 7.8 · Oct 8, 2019
• CVE-2019-13262 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.High 7.8 · Jul 4, 2019
• CVE-2019-13261 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.High 7.8 · Jul 4, 2019
• CVE-2019-13260 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.High 7.8 · Jul 4, 2019
• CVE-2019-13259 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.High 7.8 · Jul 4, 2019
• CVE-2019-13258 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.High 7.8 · Jul 4, 2019
• CVE-2019-13257 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.High 7.8 · Jul 4, 2019
• CVE-2019-13256 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.High 7.8 · Jul 4, 2019
• CVE-2019-13255 XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.High 7.8 · Jul 4, 2019