CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6

published December 29, 2023

CVSS
—
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

⚠️ We've uncovered a write access violation in XnView Classic before version 2.51.3 on Windows, and it’s like letting someone peek at your unfinished art—definitely not ideal! 🎨 Think of this vulnerability as a careless artist leaving their sketchbook open on the table. Someone could grab it and make changes without permission, potentially creating havoc before you even notice! If exploited, this vulnerability could allow attackers to manipulate data or crash the application unexpectedly, leaving your creative work vulnerable to loss or corruption. While it hasn't been widely exploited yet, the risks are real, as data integrity is crucial for any creative tool.

Put simply

Think of this vulnerability as a careless artist leaving their sketchbook open on the table. Someone could grab it and make changes without permission, potentially creating havoc before you even notice! This write access violation occurs when the application improperly handles memory access at a specific point in the code, which can lead to unexpected behavior and stability issues within the application.

What to do

If exploited, this vulnerability could allow attackers to manipulate data or crash the application unexpectedly, leaving your creative work vulnerable to loss or corruption. While it hasn't been widely exploited yet, the risks are real, as data integrity is crucial for any creative tool. To protect your artwork, update XnView Classic to version 2.51.3 or later to eliminate this vulnerability. Regularly check for updates to ensure you’re not left exposed to similar issues in the future. You've got this! Patch up and keep creating without worry! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Published
2023-12-29T00:00Z
EPSS history
Timeline
  • 29 DEC 00:00Z
    XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6
    cvelistv5