CVE-2012-0276: Xnview

Medium severity, CVSS 6.8. EPSS: 8.3% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL.

Affected products

• Xnview Xnview: up to and including 1.98.8

Published 2012-07-17. Last modified 2026-06-16.