9.3
CVSSv2

CVE-2013-3938

Published: 18/03/2014 Updated: 19/03/2014
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Integer overflow in xnview.exe in XnView 2.13 allows remote malicious users to execute arbitrary code via a large NUM_ELEMENTS field in an IFD_ENTRY structure in a JXR file, which triggers a heap-based buffer overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

xnview xnview 2.13