VULNERABILITY INTELLIGENCE

CVE-2013-3938

CVSS score9.3 HIGH
EPSS probability3.50%
CISA KEVNot currently listed
Published2014-03-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUM_ELEMENTS field in an IFD_ENTRY structure in a JXR file, which triggers a heap-based buffer overflow.

Primary references