PT-2019-19963 · Xnview · Xnview Mp

Code16 · Published 2019-03-24 · Updated 2019-03-25 · CVE-2019-9965

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XnView MP version 0.93.1

Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted file. This is related to the ntdll!RtlReAllocateHeap function.

Recommendations For XnView MP version 0.93.1, consider avoiding the use of crafted files that may trigger the denial of service or other unspecified impacts until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2019-9965

Affected Products

Xnview Mp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9965 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9965 · Vendor Advisory
• https://code610.blogspot.com/2019/03/crashing-xnview-248.html · Note