Vulnerability in Xnview

CVE-2012-0684

Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code via a crafted file containing PSD record types, a different vulnerability than CVE-2012-0685.

EPSS: 0.037 (88.7th percentile) — read the EPSS interpretation.

Affected products

  • Xnview — versions 1.0, 1.01, 1.02
  • N/a — versions n/a

Weakness classification (CWE)

References