CVE-2021-28835
https://notcve.org/view.php?id=CVE-2021-28835
Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file. • https://newsgroup.xnview.com/viewtopic.php?f=35&t=44679 https://www.xnview.com/en/xnview/#changelog • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2019-17262
https://notcve.org/view.php?id=CVE-2019-17262
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0. XnView Classic versión 2.49.1 permite un User Mode Write AV que inicia en Xwsq+0x0000000000001fc0. • https://github.com/linhlhq/research/blob/master/README.md https://www.xnview.com/en/xnview/#changelog • CWE-787: Out-of-bounds Write •
CVE-2019-17261
https://notcve.org/view.php?id=CVE-2019-17261
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51. XnView Classic versión 2.49.1, permite un User Mode Write AV que inicia en Xwsq+0x0000000000001e51. • https://github.com/linhlhq/research/blob/master/README.md https://www.xnview.com/en/xnview/#changelog • CWE-787: Out-of-bounds Write •