CVE-2009-4001: Xnview

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Integer overflow in XnView before 1.97.2 might allow remote attackers to execute arbitrary code via a DICOM image with crafted dimensions, leading to a heap-based buffer overflow.

Affected products

• Xnview Xnview: up to and including 1.97.1; version 1.0 only; version 1.01 only; version 1.02 only; version 1.03 only; version 1.04 only; …

Published 2010-03-15. Last modified 2026-06-16.