CVE-2010-1932

CRITICAL 9.3CVE-2010-1932 · Published 16/06/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
xnview xnview	`= 1.97.4`	No fix yet

Description

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field.

References

secunia.com/advisories/40141 · Vendor Advisory
coresecurity.com/content/XnView-MBM-Processing-Heap-Overflow · Exploit
securityfocus.com/bid/40852 · Exploit
securitytracker.com/id
vupen.com/english/advisories/2010/1468 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/59421

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free