CVE-2013-3939

xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary…

published January 2, 2020

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01726 · 77.4th percentile
Published
2020-01-02T19:11Z
EPSS history
Timeline
  • 02 JAN 19:11Z
    xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary…
    cvelistv5