medium5.5
CVE-2020-23886
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file.
Impact
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xnview | Xnview Mp | through 0.96.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cwe.mitre.org/data/definitions/122.html
- https://github.com/Aurorainfinity/vulnerabilities/tree/master/xnviewmp
- https://www.xnview.com/en/xnviewmp/
- https://cwe.mitre.org/data/definitions/122.html
- https://github.com/Aurorainfinity/vulnerabilities/tree/master/xnviewmp
- https://www.xnview.com/en/xnviewmp/