Evil-DB LogoEvil-DB
← All CVEs

CVE-2013-2577

high · 9.3

Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

9.3
CVSS
11.8%
EPSS (exploit prob.)
96th
EPSS percentile
2013-08-09
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
xnviewxnview<= 2.03
xnviewxnview1.0
xnviewxnview1.01
xnviewxnview1.02
xnviewxnview1.03
xnviewxnview1.04
xnviewxnview1.05
xnviewxnview1.05
xnviewxnview1.05
xnviewxnview1.06
xnviewxnview1.07
xnviewxnview1.08
xnviewxnview1.09
xnviewxnview1.10
xnviewxnview1.11
xnviewxnview1.12
xnviewxnview1.13
xnviewxnview1.14
xnviewxnview1.15
xnviewxnview1.16
xnviewxnview1.17
xnviewxnview1.17
xnviewxnview1.18
xnviewxnview1.18.1
xnviewxnview1.19
xnviewxnview1.20
xnviewxnview1.21
xnviewxnview1.22
xnviewxnview1.23
xnviewxnview1.24
xnviewxnview1.25
xnviewxnview1.25
xnviewxnview1.30
xnviewxnview1.31
xnviewxnview1.32
xnviewxnview1.33
xnviewxnview1.34
xnviewxnview1.35
xnviewxnview1.36
xnviewxnview1.37

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-2577