CVE-2013-3247

CVE-2013-3247 describes a heap-based buffer overflow vulnerability in XnView versions prior to 2.03, specifically within the xnview.exe component. This flaw allows remote attackers to execute arbitrary code by enticing a user to open a specially crafted XCF file containing a malicious RLE compressed layer. Rated with a CVSS score of 7.8 (High), successful exploitation requires user interaction (UI:R) but has low attack complexity (AC:L) and can lead to high impacts on confidentiality, integrity, and availability (C:H, I:H, A:H). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.