CVE-2013-3941

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow.

• CWE-787

• http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087Permissions Required, Vendor Advisory
• http://secunia.com/advisories/52101Not Applicable, Third Party Advisory
• http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087Permissions Required, Vendor Advisory
• http://secunia.com/advisories/52101Not Applicable, Third Party Advisory

Published

Jan 2, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-3935Cross-site request forgery (CSRF) vulnerability in Opsview b…8.8
• CVE-2013-3936Multiple cross-site scripting (XSS) vulnerabilities in Opsvi…6.1
• CVE-2013-3937Heap-based buffer overflow in xnview.exe in XnView before 2.…7.8
• CVE-2013-3938Integer overflow in xnview.exe in XnView 2.13 allows remote …
• CVE-2013-3939xnview.exe in XnView before 2.13 does not properly handle RL…7.8
• CVE-2013-3940Integer overflow in the Graphics Device Interface (GDI) in M…
• CVE-2013-3942Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Exe…7.8
• CVE-2013-3943Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN)…
• CVE-2013-3944Stack-based buffer overflow in the MrSID plugin (MrSID.dll) …7.8
• CVE-2013-3945The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allow…7.8
• CVE-2013-3946Heap-based buffer overflow in the MrSID plugin (MrSID.dll) b…7.8
• CVE-2013-3947Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Securi…