CVE-2013-3247

HIGH EPSS 82.0%
Published Jan 2, 20206y ago · Modified Jun 16, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Jan 2, 2020 6y ago
Last Modified Jun 16, 2026 2w ago

Description

Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
82.0% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 1

VendorProductVersionRange
xnviewxnview* <2.03

References 2

  • fuzzmyapp.com http://www.fuzzmyapp.com/advisories/FMA-2013-003/FMA-2013-003-EN.xml
    ExploitThird Party Advisory
  • exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/84642
    Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.