CVE-2010-1932: Xnview

High severity, CVSS 9.3. EPSS: 10.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field.

Affected products

• Xnview Xnview: version 1.97.4 only

Published 2010-06-16. Last modified 2026-06-16.