Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field.
| Software | From | Fixed in |
|---|---|---|
| xnview / xnview | 1.97.4 | 1.97.4.x |