CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0

published December 29, 2023

CVSS
โ€”
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

โš ๏ธ A pesky write access violation lurks in XnView Classic versions before 2.51.3 on Windows! Think of it like a library where a stack of books can be rearranged without permission โ€” someone could potentially move or damage important information without a trace! ๐Ÿ“š Although this vulnerability is classified as unknown severity, it still poses risks. An attacker could exploit the write access violation to potentially manipulate files or cause unexpected behavior, which could be mildly detrimental to your system's stability.

Put simply

Think of it like a library where a stack of books can be rearranged without permission โ€” someone could potentially move or damage important information without a trace! ๐Ÿ“š This vulnerability occurs due to a lack of proper access controls in the XnView Classic application, allowing unauthorized write operations to be executed in the memory space of the program.

What to do

Although this vulnerability is classified as unknown severity, it still poses risks. An attacker could exploit the write access violation to potentially manipulate files or cause unexpected behavior, which could be mildly detrimental to your system's stability. To secure your system, update XnView Classic to version 2.51.3 or higher immediately. Additionally, review permissions on your system to ensure that applications do not have unnecessary write access. Stay vigilant! You've got this! By taking these steps, you'll be making your digital environment much safer! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00578 ยท 46.8th percentile
Published
2023-12-29T00:00Z
EPSS history
Timeline
  • 29 DEC 00:00Z
    XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0
    cvelistv5