CVE-2019-9966

Name of the Vulnerable Software and Affected Versions XnView Classic version 2.48

Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted file. This is related to the xnview+0x38536c function.

Recommendations For XnView Classic version 2.48, consider avoiding the use of crafted files that may trigger the denial of service until a patch is available. As a temporary workaround, restrict the opening of potentially malicious files in XnView Classic to minimize the risk of exploitation.