CVE-2013-3939

Katalog CVE

CVSS 7.8 · High EPSS 1,7%

Kerentanan Out-of-bounds Write pada xnview. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow.

Rincian

Terbit di NVD

2 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087 permissions required · advisory vendor
• http://secunia.com/advisories/52101 not applicable · advisory vendor