Vulnerabilities > CVE-2020-23887 - Out-of-bounds Write vulnerability in Xnview MP
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |