CVE-2013-3937

HIGH EPSS 75.0%
Published Jan 2, 20206y ago · Modified Jun 16, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Jan 2, 2020 6y ago
Last Modified Jun 16, 2026 2w ago

Description

Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
75.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 1

VendorProductVersionRange
xnviewxnview* <2.13

References 2

  • newsgroup.xnview.com http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087
    Permissions RequiredVendor Advisory
  • secunia.com http://secunia.com/advisories/52101
    Not ApplicableThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.