CVE-2009-4001

CVE-2009-4001 is a critical-severity vulnerability in Xnview with a CVSS 2.0 base score of 9.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-189.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 5% (91st percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-189
• Affected product: Xnview
• Published: 2010-03-15
• Last modified: 2026-06-16

Description

Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow.

Frequently asked questions

What is CVE-2009-4001?

Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow.

How severe is CVE-2009-4001?

CVE-2009-4001 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2009-4001 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (91st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-4001?

CVE-2009-4001 primarily affects Xnview. In total, 98 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-4001?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2009-4001 published?

CVE-2009-4001 was published on 2010-03-15 and last updated on 2026-06-16.

References

• http://newsgroup.xnview.com/viewtopic.php?f=35&t=19469
• http://secunia.com/secunia_research/2009-60/
• http://www.osvdb.org/62829
• http://www.securityfocus.com/archive/1/509999/100/0/threaded
• http://www.securityfocus.com/bid/38629
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56802

Affected products (98)

• cpe:2.3:a:xnview:xnview:*:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.0:a:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.01:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.02:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.03:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.04:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.05:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.05:b:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.05:c:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.06:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.07:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.08:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.09:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.10:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.11:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.12:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.13:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.14:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.15:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.16:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.17:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.17:a:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.18:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.18.1:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.19:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.20:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.21:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.22:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.23:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.24:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.25:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.25:a:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.30:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.31:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.32:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.33:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.34:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.35:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.36:*:*:*:*:*:*:*
• cpe:2.3:a:xnview:xnview:1.37:*:*:*:*:*:*:*

More vulnerabilities in Xnview

• CVE-2013-3493 — Critical (CVSS 9.8): XnView 2.03 has an integer overflow vulnerability
• CVE-2013-3492 — Critical (CVSS 9.8): XnView 2.03 has a stack-based buffer overflow vulnerability
• CVE-2013-3941 — Critical (CVSS 9.8): Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ…
• CVE-2012-4988 — Critical (CVSS 9.3): Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and…
• CVE-2013-3938 — Critical (CVSS 9.3): Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large…
• CVE-2013-2577 — Critical (CVSS 9.3): Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

All CVEs affecting Xnview →

Other CWE-189 (Numeric Errors) vulnerabilities

• CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
• CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
• CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
• CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
• CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
• CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…

Browse all CWE-189 (Numeric Errors) vulnerabilities →