Approved changes feed: RSS · Atom

cpe:2.3:a:xnview:xnview:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXnview (c4ebbfab-fb20-56fb-9976-2080b72d00e9)
ProductXnview (8dca8b62-90bf-5eb7-923e-a6165b594c54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28835 vulnerable 2026-06-08 05:31:25.041365 Details available
HIGH (7.8)
Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
Published: 2023-08-11T00:00:00.000Z
Updated: 2024-10-09T17:35:30.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3941 vulnerable 2026-06-08 05:04:33.225371 Details available
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow.
Published: 2020-01-02T19:11:40.000Z
Updated: 2024-08-06T16:30:48.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3939 vulnerable 2026-06-08 05:04:33.224437 Details available
xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow.
Published: 2020-01-02T19:11:43.000Z
Updated: 2024-08-06T16:30:48.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3937 vulnerable 2026-06-08 05:04:33.222261 Details available
Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.
Published: 2020-01-02T19:11:47.000Z
Updated: 2024-08-06T16:30:48.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3493 vulnerable 2026-06-08 05:04:31.805964 Details available
XnView 2.03 has an integer overflow vulnerability
Published: 2020-01-27T14:26:46.000Z
Updated: 2024-08-06T16:14:56.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3492 vulnerable 2026-06-08 05:04:31.804537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3247 vulnerable 2026-06-08 05:04:30.575233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3246 vulnerable 2026-06-08 05:04:30.574919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2577 vulnerable 2026-06-08 05:04:26.854774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0685 vulnerable 2026-06-08 05:00:44.445007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0684 vulnerable 2026-06-08 05:00:44.367497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0282 vulnerable 2026-06-08 05:00:40.511549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0277 vulnerable 2026-06-08 05:00:40.506797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0276 vulnerable 2026-06-08 05:00:40.506389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1338 vulnerable 2026-06-08 04:57:58.384829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4001 vulnerable 2026-06-08 04:51:45.957939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.