Core Security Technologies Advisory – XnView is prone to a security vulnerability when processing MBM files. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine, by enticing the user of XnView to open a specially crafted file.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/90685/CORE-2010-0514.txt
Source: https://packetstormsecurity.com/files/90685/Core-Security-Technologies-Advisory-2010.0514.html