Xnview — known CVE vulnerabilities

Every CVE whose affected-product data names Xnview, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (156)

• CVE-2013-3493 — CVSS 9.8 (critical): XnView 2.03 has an integer overflow vulnerability
• CVE-2013-3941 — CVSS 9.8 (critical): Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers…
• CVE-2013-3492 — CVSS 9.8 (critical): XnView 2.03 has a stack-based buffer overflow vulnerability
• CVE-2013-3938 — CVSS 9.3 (critical): Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUM_ELEMENTS field in an…
• CVE-2012-0684 — CVSS 9.3 (critical): Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD…
• CVE-2012-0685 — CVSS 9.3 (critical): Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD…
• CVE-2012-4988 — CVSS 9.3 (critical): Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote…
• CVE-2009-4001 — CVSS 9.3 (critical): Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions…
• CVE-2010-1932 — CVSS 9.3 (critical): Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM)…
• CVE-2013-2577 — CVSS 9.3 (critical): Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.
• CVE-2024-11950 — CVSS 8.8 (high): XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2018-15176 — CVSS 7.8 (high): XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and…
• CVE-2013-3246 — CVSS 7.8 (high): Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer…
• CVE-2013-3247 — CVSS 7.8 (high): Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE…
• CVE-2019-13262 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.
• CVE-2019-17261 — CVSS 7.8 (high): XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.
• CVE-2019-17262 — CVSS 7.8 (high): XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.
• CVE-2021-28427 — CVSS 7.8 (high): Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
• CVE-2021-28835 — CVSS 7.8 (high): Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
• CVE-2023-46587 — CVSS 7.8 (high): Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.
• CVE-2013-3937 — CVSS 7.8 (high): Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field…
• CVE-2013-3939 — CVSS 7.8 (high): xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers…
• CVE-2017-10736 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10737 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10738 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10739 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10740 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10741 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10742 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10743 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10744 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10745 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10746 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10747 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10748 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10749 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10750 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file…
• CVE-2017-10751 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10752 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10753 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10754 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10755 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10756 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10757 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10758 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10759 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10760 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10761 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10762 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10763 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10764 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10765 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10766 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10767 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10768 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10769 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10770 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10771 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10772 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10773 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10774 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10775 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10776 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10777 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10778 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10779 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10780 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10781 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10782 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-10783 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14270 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14271 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14272 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14273 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14274 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14275 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14276 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14277 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14278 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14279 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14280 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14281 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14282 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14283 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14284 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14285 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14538 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-14541 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-14580 — CVSS 7.8 (high): XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file…
• CVE-2017-15772 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15773 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15774 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15775 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15776 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15777 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15778 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15779 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15780 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15781 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15782 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15783 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15784 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15785 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15786 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15787 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15788 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15789 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file…
• CVE-2017-15801 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15802 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-15803 — CVSS 7.8 (high): XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a…
• CVE-2017-8282 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled…
• CVE-2017-8381 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mkv file that is mishandled…
• CVE-2017-8781 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted JPEG 2000 file that is…
• CVE-2017-9529 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV…
• CVE-2017-9893 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV…
• CVE-2017-9894 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV…
• CVE-2017-9895 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access…
• CVE-2017-9896 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "Read Access…
• CVE-2017-9897 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV…
• CVE-2017-9898 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV…
• CVE-2017-9899 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting…
• CVE-2017-9900 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting…
• CVE-2017-9901 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting…
• CVE-2017-9902 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting…
• CVE-2017-9903 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting…
• CVE-2017-9904 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9905 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9906 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9907 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9908 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9909 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9910 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9911 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9912 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9913 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…
• CVE-2017-9914 — CVSS 7.8 (high): XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access…
• CVE-2018-15174 — CVSS 7.8 (high): XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash)…
• CVE-2018-15175 — CVSS 7.8 (high): XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVariant+0x0000000000000…
• CVE-2019-13083 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
• CVE-2019-13084 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.
• CVE-2019-13085 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.
• CVE-2019-13253 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.
• CVE-2019-13254 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.
• CVE-2019-13255 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.
• CVE-2019-13256 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.
• CVE-2019-13257 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.
• CVE-2019-13258 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.
• CVE-2019-13259 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.
• CVE-2019-13260 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.
• CVE-2019-13261 — CVSS 7.8 (high): XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.
• CVE-2008-1461 — CVSS 7.6 (high): Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the…
• CVE-2011-1338 — CVSS 6.9 (medium): Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder…
• CVE-2012-1051 — CVSS 6.8 (medium): Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a…
• CVE-2012-0282 — CVSS 6.8 (medium): Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly…
• CVE-2012-0277 — CVSS 6.8 (medium): Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly…
• CVE-2012-0276 — CVSS 6.8 (medium): Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and…