XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.Referenceshttps://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x30ecfa.md
