Vulnerabilities > CVE-2020-23887 - Out-of-bounds Write vulnerability in Xnview MP
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |