CVE-2013-3937

CVE-2013-3937: vulnerability in XnView

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
exploitation probability
1.7%top 23% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.
Affected products
XnView · XnView
Related CVEs — XnView

In the same product, most dangerous first.

CVE-2013-3941—CVE-2013-3941EPSS 2.8%CVE-2013-3246—CVE-2013-3246EPSS 2.4%CVE-2013-3247—CVE-2013-3247EPSS 2.4%CVE-2013-3939—CVE-2013-3939EPSS 1.7%CVE-2013-3493—CVE-2013-3493EPSS 1.6%CVE-2013-3492—CVE-2013-3492EPSS 1.5%
References
http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087http://secunia.com/advisories/52101