• info
• discussion
• exploit
• solution
• references

XnView XPMHeaders Buffer Overflow Vulnerability

XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial of service.

This issue affects XnView 1.90.3; other versions may also be vulnerable.