CVE-2020-23887

State: Published
Severity: Not scored
Published: Nov 10, 2021
Updated: Aug 4, 2024
Reserved: Aug 13, 2020

Description

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/Aurorainfinity/vulnerabilities/tree/master/xnviewmp
https://www.xnview.com/en/xnviewmp/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.