CVE-2013-3247 Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.
HighCVSS 7.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xnview | < 2.03 | 2.03 |
| xnview | = before 2.03 | No fix listed |
References
- www.fuzzmyapp.com exploit third-party-advisory
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry