CVE-2012-0685: Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote attackers to execute arbitrary code v...

Security readout for executives and security teams

CVE-2012-0685 is a legacy XnViewer/XnView flaw where a specially crafted PSD image file can trigger arbitrary code execution in versions before 1.98.5. Business risk depends on whether users or automated workflows still open untrusted PSD files with this old software. Exposure is most likely on workstations, image-processing systems, or legacy workflows running XnView before 1.98.5 and opening PSD files from email, downloads, customer submissions, or shared folders. Prioritize remediation where old XnView installations handle files from outside the organization. The issue is old, but arbitrary code execution through document handling can still matter on exposed or unmanaged endpoints. Mitigation focus: Inventory XnView/XnViewer installations and identify versions before 1.98.5.; Upgrade affected installations to 1.98.5 or later where vendor guidance supports it.; Restrict opening PSD files from untrusted sources on vulnerable systems..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.