GCVE - cpe:2.3:a:xnview:xnview:1.97.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xnview:xnview:1.97.4:*:*:*:*:*:*:*

part: a version: 1.97.4 update: *

Vendor	Xnview (`c4ebbfab-fb20-56fb-9976-2080b72d00e9`)
Product	Xnview (`8dca8b62-90bf-5eb7-923e-a6165b594c54`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2577`	vulnerable	2026-06-08 05:04:26.911726	Details available Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. Published: 2013-08-09T21:00:00.000Z Updated: 2024-08-06T15:44:32.301Z Open on db.gcve.eu Reference links http://newsgroup.xnview.com/viewtopic.php?f=35&t=28400 https://exchange.xforce.ibmcloud.com/vulnerabilities/85919 http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability http://www.securitytracker.com/id/1028817 http://www.exploit-db.com/exploits/27049	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0685`	vulnerable	2026-06-08 05:00:44.446691	Details available Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0684. Published: 2012-05-09T10:00:00.000Z Updated: 2024-09-17T01:51:11.709Z Open on db.gcve.eu Reference links http://technet.microsoft.com/en-us/security/msvr/msvr12-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0684`	vulnerable	2026-06-08 05:00:44.444204	Details available Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0685. Published: 2012-05-09T10:00:00.000Z Updated: 2024-09-16T20:03:08.556Z Open on db.gcve.eu Reference links http://technet.microsoft.com/en-us/security/msvr/msvr12-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1932`	vulnerable	2026-06-08 04:54:11.008725	Details available Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field. Published: 2010-06-16T20:00:00.000Z Updated: 2024-08-07T02:17:13.122Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/59421 http://www.coresecurity.com/content/XnView-MBM-Processing-Heap-Overflow http://www.vupen.com/english/advisories/2010/1468 http://secunia.com/advisories/40141 http://www.securityfocus.com/bid/40852	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.