Vulnerability in Xnview

CVE-2009-4001

Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow.

EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.

Affected products

Xnview — versions 1.91.1, 1.46, 1.93.3
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC)
PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)